date/time : 2010-10-27, 01:37:45, 218ms computer name : GORT user name : Chasen registered owner : Chasen Lindsey operating system : Windows XP Service Pack 3 build 2600 system language : English system up time : 13 hours 14 minutes program up time : 44 minutes 1 second processors : 2x Intel(R) Pentium(R) 4 CPU 3.20GHz physical memory : 919/2046 MB (free/total) free disk space : (C:) 83.68 GB display mode : 1280x1024, 32 bit process id : $c54 allocated memory : 190.44 MB executable : Armada2.exe current module : FleetOpsHook.dll module date/time : 2010-07-12 04:50 compiled with : Delphi 2006/07 madExcept version : 3.0l contact name : Zoral contact email : undyingnephalim@yahoo.com callstack crc : $53823cc4, $f7e85f59, $f7e85f59 exception number : 1 exception class : EAccessViolation exception message : Access violation at address 7C928C0B in module 'ntdll.dll'. Read of address 00000322. Main ($72c): 7c928c0b +18cde ntdll.dll RtlFreeHeap 77c2c2d8 +000bd msvcrt.dll free 5a92f31b +0000b FleetOpsHook.dll memoryManagement 72 +16 operatorFree 004650ba +0000a Armada2.exe ExplosionClass.~ExplosionClass 00465cf6 +00006 Armada2.exe destructor' 00464e27 +00037 Armada2.exe ExplosionClass.Clean 00484675 +00005 Armada2.exe Program.GameSystemClose 00486be9 +005e9 Armada2.exe Program.MainLoop 0047608d +0011d Armada2.exe _WinMain@16 5a9f4dd5 +00029 FleetOpsHook.dll FleetOpsFunctionsHook 5048 +3 DebugException_Execute_New 5a9f4eba +00052 FleetOpsHook.dll FleetOpsFunctionsHook 5084 +19 A2_WinMain 006734ef +0012f Armada2.exe _WinMainCRTStartup thread $21c: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $714: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects thread $1628: 7c90df48 +0a ntdll.dll NtWaitForMultipleObjects 7c80958a +00 kernel32.dll WaitForMultipleObjectsEx 7c80a110 +13 kernel32.dll WaitForMultipleObjects modules: 00400000 Armada2.exe 43.0.0.0 C:\Program Files\Activision\SIGMA\SigmaFO3\data 00e60000 d3dx9_33.dll 9.18.904.15 C:\Program Files\Activision\SIGMA\SigmaFO3\data 02d50000 Tunngle.dll 1.0.3.1 C:\Program Files\Activision\SIGMA\SigmaFO3\data 10000000 NetworkManager.dll C:\Program Files\Activision\SIGMA\SigmaFO3\data 30000000 binkw32.dll 1.5.21.0 C:\Program Files\Activision\SIGMA\SigmaFO3\data 4a800000 Win2kDisableTaskSwitch.dll C:\Program Files\Activision\SIGMA\SigmaFO3\data 4fdd0000 d3d9.dll 5.3.2600.5512 C:\WINDOWS\system32 5a800000 FleetOpsHook.dll C:\Program Files\Activision\SIGMA\SigmaFO3 5ad70000 uxtheme.dll 6.0.2900.5512 C:\WINDOWS\system32 605d0000 mslbui.dll 5.1.2600.5512 C:\WINDOWS\system32 64000000 mdnsNSP.dll 2.0.2.0 C:\Program Files\Bonjour 662b0000 hnetcfg.dll 5.1.2600.5512 C:\WINDOWS\system32 6d990000 d3d8thk.dll 5.3.2600.5512 C:\WINDOWS\system32 6d9a0000 d3d8.dll 5.3.2600.5512 C:\WINDOWS\system32 71a50000 mswsock.dll 5.1.2600.5625 C:\WINDOWS\system32 71a90000 wshtcpip.dll 5.1.2600.5512 C:\WINDOWS\System32 71aa0000 WS2HELP.dll 5.1.2600.5512 C:\WINDOWS\system32 71ab0000 WS2_32.dll 5.1.2600.5512 C:\WINDOWS\system32 71ad0000 wsock32.dll 5.1.2600.5512 C:\WINDOWS\system32 72d10000 msacm32.drv 5.1.2600.0 C:\WINDOWS\system32 72d20000 wdmaud.drv 5.1.2600.5512 C:\WINDOWS\system32 73b50000 AVIFIL32.dll 5.1.2600.5908 C:\WINDOWS\system32 73ee0000 KsUser.dll 5.3.2600.5512 C:\WINDOWS\system32 73f10000 DSOUND.dll 5.3.2600.5512 C:\WINDOWS\system32 74720000 MSCTF.dll 5.1.2600.5512 C:\WINDOWS\system32 755c0000 msctfime.ime 5.1.2600.5768 C:\WINDOWS\system32 75a70000 MSVFW32.dll 5.1.2600.5512 C:\WINDOWS\system32 76080000 MSVCP60.dll 6.2.3104.0 C:\WINDOWS\system32 76390000 IMM32.dll 5.1.2600.5512 C:\WINDOWS\system32 763b0000 comdlg32.dll 6.0.2900.5512 C:\WINDOWS\system32 76b40000 WINMM.dll 5.1.2600.5512 C:\WINDOWS\system32 76c30000 WINTRUST.dll 5.131.2600.5922 C:\WINDOWS\system32 76c90000 IMAGEHLP.dll 5.1.2600.5512 C:\WINDOWS\system32 76d60000 Iphlpapi.dll 5.1.2600.5512 C:\WINDOWS\system32 76f20000 DNSAPI.dll 5.1.2600.5625 C:\WINDOWS\system32 76f60000 WLDAP32.dll 5.1.2600.5512 C:\WINDOWS\system32 76fb0000 winrnr.dll 5.1.2600.5512 C:\WINDOWS\System32 76fc0000 rasadhlp.dll 5.1.2600.5512 C:\WINDOWS\system32 77120000 oleaut32.dll 5.1.2600.5512 C:\WINDOWS\system32 773d0000 COMCTL32.dll 6.0.2900.6028 C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202 774e0000 ole32.dll 5.1.2600.6010 C:\WINDOWS\system32 77920000 SETUPAPI.dll 5.1.2600.5512 C:\WINDOWS\system32 77a80000 CRYPT32.dll 5.131.2600.5512 C:\WINDOWS\system32 77b20000 MSASN1.dll 5.1.2600.5875 C:\WINDOWS\system32 77bd0000 midimap.dll 5.1.2600.5512 C:\WINDOWS\system32 77be0000 MSACM32.dll 5.1.2600.5512 C:\WINDOWS\system32 77c00000 VERSION.dll 5.1.2600.5512 C:\WINDOWS\system32 77c10000 msvcrt.dll 7.0.2600.5512 C:\WINDOWS\system32 77dd0000 ADVAPI32.dll 5.1.2600.5755 C:\WINDOWS\system32 77e70000 RPCRT4.dll 5.1.2600.6022 C:\WINDOWS\system32 77f10000 GDI32.dll 5.1.2600.5698 C:\WINDOWS\system32 77f60000 SHLWAPI.dll 6.0.2900.5912 C:\WINDOWS\system32 77fe0000 Secur32.dll 5.1.2600.5834 C:\WINDOWS\system32 7c800000 kernel32.dll 5.1.2600.5781 C:\WINDOWS\system32 7c900000 ntdll.dll 5.1.2600.5755 C:\WINDOWS\system32 7c9c0000 SHELL32.dll 6.0.2900.6018 C:\WINDOWS\system32 7e410000 USER32.dll 5.1.2600.5512 C:\WINDOWS\system32 processes: 0000 Idle 0 0 0004 System 0 0 normal 0640 smss.exe 0 0 normal C:\WINDOWS\system32 0670 csrss.exe 0 0 068c winlogon.exe 46 14 high C:\WINDOWS\system32 06b8 services.exe 4 2 normal C:\WINDOWS\system32 06c4 lsass.exe 4 1 normal C:\WINDOWS\system32 076c Ati2evxx.exe 11 5 normal C:\WINDOWS\system32 077c svchost.exe 4 1 normal C:\WINDOWS\system32 07c4 svchost.exe 0 0 017c svchost.exe 11 47 normal C:\WINDOWS\System32 0198 WTouchService.exe 4 1 normal C:\Program Files\WTouch 0230 svchost.exe 0 0 0414 svchost.exe 0 0 059c spoolsv.exe 4 7 normal C:\WINDOWS\system32 07fc WTouchUser.exe 20 9 normal C:\Program Files\WTouch 00e8 Explorer.EXE 1038 473 normal C:\WINDOWS 02c8 issch.exe 4 1 normal C:\Program Files\Common Files\InstallShield\UpdateService 0324 Acrotray.exe 31 13 normal C:\Program Files\Adobe\Acrobat 9.0\Acrobat 0348 iTunesHelper.exe 20 17 normal C:\Program Files\iTunes 0350 HPWuSchd2.exe 11 3 normal C:\Program Files\HP\HP Software Update 0368 ctfmon.exe 28 11 normal C:\WINDOWS\system32 0380 hpqtra08.exe 43 99 normal C:\Program Files\HP\Digital Imaging\bin 0394 RtlWake.exe 56 32 normal C:\Program Files\NETGEAR\WG111v2 Configuration Utility 05e4 svchost.exe 0 0 062c AppleMobileDeviceService.exe 4 1 normal C:\Program Files\Common Files\Apple\Mobile Device Support 01dc mDNSResponder.exe 4 2 normal C:\Program Files\Bonjour 02bc hamachi-2.exe 8 2 normal C:\Program Files\LogMeIn Hamachi 02b8 svchost.exe 4 378 normal C:\WINDOWS\system32 0434 mcshield.exe 4 9 high C:\PROGRA~1\McAfee\VIRUSS~1 03dc mdm.exe 4 3 normal C:\Program Files\Common Files\Microsoft Shared\VS7Debug 0540 raysat_3dsmax2010_32server.exe 4 1 normal C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite 0620 MPFSrv.exe 4 10 normal C:\Program Files\McAfee\MPF 00e4 svchost.exe 4 3 normal C:\WINDOWS\System32 07f4 svchost.exe 4 3 normal C:\WINDOWS\System32 0a6c svchost.exe 4 2 normal C:\WINDOWS\system32 0a78 Pen_Tablet.exe 4 2 normal C:\WINDOWS\system32 0a9c TnglCtrl.exe 21 41 normal C:\Program Files\Tunngle 0e74 Pen_TabletUser.exe 8 4 normal C:\WINDOWS\system32\WTablet 0f08 Pen_Tablet.exe 15 13 high C:\WINDOWS\system32 0fc8 RtWLan.exe 90 163 normal C:\Program Files\NETGEAR\WG111v2 Configuration Utility 03f8 iPodService.exe 4 5 normal C:\Program Files\iPod\bin 0298 alg.exe 0 0 0b9c svchost.exe 4 1 normal C:\WINDOWS\System32 0bb0 hpqSTE08.exe 11 16 normal C:\Program Files\HP\Digital Imaging\bin 0c74 hpqbam08.exe 11 6 normal C:\Program Files\HP\Digital Imaging\bin 0e88 hpqgpc01.exe 34 7 normal C:\Program Files\HP\Digital Imaging\bin 0150 mcsysmon.exe 4 9 normal C:\PROGRA~1\McAfee\VIRUSS~1 0a0c msnmsgr.exe 397 233 normal C:\Program Files\Windows Live\Messenger 0bec wlcomm.exe 12 11 normal C:\Program Files\Windows Live\Contacts 0b38 YahooMessenger.exe 902 411 normal C:\Program Files\Yahoo!\Messenger 04d0 wmiprvse.exe 0 0 0f44 PresentationFontCache.exe 0 0 1634 firefox.exe 570 89 normal C:\Program Files\Mozilla Firefox 0220 hpswp_clipbook.exe 4 2 normal C:\Program Files\HP\Digital Imaging\Smart Web Printing 1784 plugin-container.exe 55 30 normal C:\Program Files\Mozilla Firefox 0d38 FNPLicensingService.exe 4 1 normal C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher 15a4 Photoshop.exe 642 1197 normal C:\Program Files\Adobe\Adobe Photoshop CS4 0de0 ms3d.exe 161 372 normal C:\Program Files\MilkShape 3D 1.8.5 1130 3dsmax.exe 1494 1172 normal C:\Program Files\Autodesk\3ds Max 2010 0c54 Armada2.exe 115 54 normal C:\Program Files\Activision\SIGMA\SigmaFO3\data hardware: + Computer - ACPI Multiprocessor PC + Disk drives - SanDisk U3 Cruzer Micro USB Device - WDC WD2500AAJS-00L7A0 + Display adapters - RADEON X600 256MB HyperMemory (driver 8.23.0.0) + DVD/CD-ROM drives - SanDisk U3 Cruzer Micro USB Device - SONY DVD-ROM DDU1615 - TSSTcorp CD-RW TS-H292B + Floppy disk controllers - Standard floppy disk controller + Floppy disk drives - Floppy disk drive + Human Interface Devices - HID-compliant consumer control device - HID-compliant consumer control device - HID-compliant consumer control device - HID-compliant device - HID-compliant device - HID-compliant device - USB Human Interface Device - USB Human Interface Device - USB Human Interface Device - USB Human Interface Device - Virtual Keyboard Driver (driver 1.1.0.0) - Virtual Keyboard Interface (driver 1.1.0.0) - Virtual Media Keys - Wacom HID Digitizer - Wacom HID Pen - Wacom Virtual Hid Driver (driver 2.9.2.3) + IDE ATA/ATAPI controllers - Intel(R) 82801GR/GH SATA AHCI Controller (driver 7.6.0.1011) - Primary IDE Channel - Secondary IDE Channel - Standard Dual Channel PCI IDE Controller + Keyboards - HID Keyboard Device - HID Keyboard Device + Mice and other pointing devices - HID-compliant mouse - Wacom Mouse (driver 1.2.2.0) - Wacom Mouse Monitor (driver 1.0.3.4) + Modems - Conexant D850 56K V.9x DFVc Modem (driver 7.6.0.50) + Monitors - Plug and Play Monitor + Network adapters - Hamachi Network Interface (driver 6.0.2.2) - Intel(R) PRO/1000 PL Network Connection (driver 9.0.15.0) - NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter (driver 5.1213.6.327) - TAP-Win32 Adapter V9 (Tunngle) (driver 9.0.0.6) + Processors - Intel(R) Pentium(R) 4 CPU 3.20GHz - Intel(R) Pentium(R) 4 CPU 3.20GHz + Sound, video and game controllers - Audio Codecs - IDT High Definition Audio CODEC (driver 5.10.5607.0) - Legacy Audio Drivers - Legacy Video Capture Devices - Media Control Devices - USB Audio Device - Video Codecs + System devices - ACPI Fixed Feature Button - ACPI Power Button - Direct memory access controller - Intel(R) 82801 PCI Bridge - 244E - ISAPNP Read Data Port - Logical Disk Manager - Microcode Update Device - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Microsoft UAA Bus Driver for High Definition Audio - Motherboard resources - Numeric data processor - PCI bus - PCI standard host CPU bridge - PCI standard ISA bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - PCI standard PCI-to-PCI bridge - Plug and Play Software Device Enumerator - Programmable interrupt controller - System board - System board - System CMOS/real time clock - System speaker - System timer - Terminal Server Device Redirector - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - Volume Manager + Universal Serial Bus controllers - Standard Enhanced PCI to USB Host Controller - Standard Universal PCI to USB Host Controller - Standard Universal PCI to USB Host Controller - Standard Universal PCI to USB Host Controller - Standard Universal PCI to USB Host Controller - USB Composite Device - USB Composite Device - USB Mass Storage Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub cpu registers: eax = 00000321 ebx = 00000000 ecx = 00000322 edx = 00360608 esi = 124567e0 edi = 00360000 eip = 7c928c0b esp = 0012fcfc ebp = 0012fdb8 stack dump: 0012fcfc 00 00 00 00 00 68 45 12 - 0c 2a cd 02 00 00 5f 03 .....hE..*...._. 0012fd0c 08 06 36 00 5d 00 91 7c - 00 02 00 00 98 6c 2d 03 ..6.]..|.....l-. 0012fd1c 0c 2a cd 02 00 00 5f 03 - 7c 27 af 00 90 6c 2d 03 .*...._.|'...l-. 0012fd2c 1c fe 12 00 14 fe 12 00 - 68 27 af 00 d0 78 42 7e ........h'...xB~ 0012fd3c 98 6c 2d 03 22 03 00 00 - e0 78 42 7e 21 03 00 00 .l-."....xB~!... 0012fd4c e0 67 45 12 b0 8e 42 7e - 00 0d 90 12 80 89 00 00 .gE...B~........ 0012fd5c ec 8e 42 7e 68 27 af 00 - 0f 00 00 00 90 01 36 00 ..B~h'........6. 0012fd6c fc 8e 42 7e 18 00 00 00 - 00 00 00 00 00 00 00 00 ..B~............ 0012fd7c 00 00 00 00 00 00 36 00 - e0 67 45 12 90 fd 12 00 ......6..gE..... 0012fd8c 18 00 00 00 00 00 00 00 - 00 00 00 00 00 00 01 01 ................ 0012fd9c 00 00 00 00 fc fc 12 00 - 20 f9 12 00 f0 fd 12 00 ................ 0012fdac 20 e9 90 7c 60 00 91 7c - ff ff ff ff 00 fe 12 00 ...|`..|........ 0012fdbc de c2 c2 77 00 00 36 00 - 00 00 00 00 00 68 45 12 ...w..6......hE. 0012fdcc 00 00 00 00 28 c0 c0 12 - 0c 2a cd 02 00 00 36 00 ....(....*....6. 0012fddc 00 00 00 00 e3 c2 c2 77 - 00 02 00 00 cc fd 12 00 .......w........ 0012fdec 20 f9 12 00 d4 fe 12 00 - 94 5c c3 77 70 20 c1 77 .........\.wp..w 0012fdfc ff ff ff ff 0c fe 12 00 - 20 f3 92 5a 00 68 45 12 ...........Z.hE. 0012fe0c 20 fe 12 00 bf 50 46 00 - 00 68 45 12 fb 5c 46 00 .....PF..hE..\F. 0012fe1c e8 00 00 00 3c fe 12 00 - 29 4e 46 00 01 00 00 00 ....<...)NF..... 0012fe2c 00 02 00 00 30 7b 73 00 - 0c 2a cd 02 98 6c 2d 03 ....0{s..*...l-. disassembling: 5a92f310 public memoryManagement.operatorFree: ; function entry point 5a92f310 56 push ebp 5a92f311 mov ebp, esp 5a92f313 mov eax, [ebp+8] 5a92f316 70 test eax, eax 5a92f318 jz loc_5a92f321 5a92f318 5a92f31a 72 push eax 5a92f31b > call -$a8 ($5a92f278) ; memoryManagement.free 5a92f31b 5a92f320 pop ecx 5a92f31b 5a92f321 loc_5a92f321: 5a92f321 74 pop ebp 5a92f322 ret