date/time : 2010-10-18, 15:23:21, 931ms computer name : HOME user name : me registered owner : me operating system : Windows Vista Service Pack 2 build 6002 system language : English system up time : 4 days 5 hours program up time : 37 seconds processors : 2x Intel(R) Pentium(R) 4 CPU 3.00GHz physical memory : 1071/2045 MB (free/total) free disk space : (C:) 49.00 GB display mode : 1440x900, 32 bit process id : $15a4 allocated memory : 110.67 MB executable : Armada2.exe current module : FleetOpsHook.dll module date/time : 2010-07-12 04:50 compiled with : Delphi 2006/07 madExcept version : 3.0l callstack crc : $3e0839f5, $34e1af5b, $34e1af5b count : 2 exception number : 1 exception class : EAccessViolation exception message : Access violation at address 0053C334 in module 'Armada2.exe'. Read of address 00000008. Main ($1454): 0053c334 +084 Armada2.exe RtimeClass.Load 00401421 +021 Armada2.exe AiMission.LoadMission 00602608 +378 Armada2.exe LoadGame_MainLoad 00602fb4 +2a4 Armada2.exe LoadGame 00484d70 +030 Armada2.exe Program.GameOpenLoad 00485897 +117 Armada2.exe Program.GameOpen 00487246 +166 Armada2.exe Program.GameDoOne 00486b44 +544 Armada2.exe Program.MainLoop 0047608d +11d Armada2.exe _WinMain@16 5a9f4dd5 +029 FleetOpsHook.dll FleetOpsFunctionsHook 5048 +3 DebugException_Execute_New 5a9f4eba +052 FleetOpsHook.dll FleetOpsFunctionsHook 5084 +19 A2_WinMain 006734ef +12f Armada2.exe _WinMainCRTStartup 7770d0e7 +010 kernel32.dll BaseThreadInitThunk thread $11f8: 77a657ae +0a ntdll.dll NtWaitForWorkViaWorkerFactory 7770d0e7 +10 kernel32.dll BaseThreadInitThunk thread $43c: 77a657ae +0a ntdll.dll NtWaitForWorkViaWorkerFactory 7770d0e7 +10 kernel32.dll BaseThreadInitThunk thread $12cc: 77a6560e +0a ntdll.dll NtWaitForMultipleObjects 7770a5d1 +ef kernel32.dll WaitForMultipleObjectsEx 7770a6eb +13 kernel32.dll WaitForMultipleObjects 7770d0e7 +10 kernel32.dll BaseThreadInitThunk thread $6f0: 77a6560e +0a ntdll.dll NtWaitForMultipleObjects 7770a5d1 +ef kernel32.dll WaitForMultipleObjectsEx 7770a6eb +13 kernel32.dll WaitForMultipleObjects 7770d0e7 +10 kernel32.dll BaseThreadInitThunk thread $1580: 77a6555e +0a ntdll.dll NtTraceControl 77a0f6bb +40 ntdll.dll EtwpNotificationThread 7770d0e7 +10 kernel32.dll BaseThreadInitThunk thread $b6c: 77a6560e +0a ntdll.dll NtWaitForMultipleObjects 7770a5d1 +ef kernel32.dll WaitForMultipleObjectsEx 7770a6eb +13 kernel32.dll WaitForMultipleObjects 7770d0e7 +10 kernel32.dll BaseThreadInitThunk thread $17e4: 77a6560e +0a ntdll.dll NtWaitForMultipleObjects 7770d0e7 +10 kernel32.dll BaseThreadInitThunk thread $100c: 77a6560e +0a ntdll.dll NtWaitForMultipleObjects 7770a5d1 +ef kernel32.dll WaitForMultipleObjectsEx 7770a6eb +13 kernel32.dll WaitForMultipleObjects 00463ce7 +57 Armada2.exe BinkThread.sStreamThreadFunction 7770d0e7 +10 kernel32.dll BaseThreadInitThunk modules: 00400000 Armada2.exe 43.0.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 03e90000 Tunngle.dll 1.0.3.1 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 10000000 NetworkManager.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 10100000 lgscroll.dll 4.72.40.0 C:\Program Files\Logitech\SetPoint 10d00000 GameHook.dll 4.72.40.0 C:\Program Files\Logitech\SetPoint 30000000 binkw32.dll 1.5.21.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 4a800000 Win2kDisableTaskSwitch.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 5a800000 FleetOpsHook.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations 62c10000 atiumdva.dll 7.14.10.218 C:\Windows\system32 64000000 atiumdag.dll 8.14.10.647 C:\Windows\system32 64d40000 d3dx9_33.dll 9.18.904.15 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 650b0000 AcGenral.DLL 6.0.6002.18244 C:\Windows\AppPatch 69070000 MSVFW32.dll 6.0.6002.18158 C:\Windows\system32 6bdc0000 d3d8.dll 6.0.6001.18000 C:\Windows\system32 6c0d0000 d3d9.dll 6.0.6002.18005 C:\Windows\system32 6dd30000 MSVCP60.dll 7.0.6002.18005 C:\Windows\system32 6dda0000 DSOUND.dll 6.0.6002.18005 C:\Windows\system32 6ef20000 d3d8thk.dll 6.0.6000.16386 C:\Windows\system32 6ef30000 dwmapi.dll 6.0.6001.18000 C:\Windows\system32 6f2f0000 sfc.dll 6.0.6000.16386 C:\Windows\system32 6f560000 pnrpnsp.dll 6.0.6001.18000 C:\Windows\system32 71d40000 winrnr.dll 6.0.6002.18005 C:\Windows\System32 71f20000 napinsp.dll 6.0.6001.18000 C:\Windows\system32 71f40000 rasadhlp.dll 6.0.6000.16386 C:\Windows\system32 724b0000 MSVCR80.dll 8.0.50727.4053 C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d08d7da0442a985d 72610000 ShimEng.dll 6.0.6000.16386 C:\Windows\system32 73310000 Fwpuclnt.dll 6.0.6002.18005 C:\Windows\system32 73d50000 wsock32.dll 6.0.6001.18000 C:\Windows\system32 74110000 AVIFIL32.dll 6.0.6002.18158 C:\Windows\system32 743a0000 audioeng.dll 6.0.6001.18000 C:\Windows\system32 744f0000 MSACM32.dll 6.0.6001.18000 C:\Windows\system32 74520000 AUDIOSES.DLL 6.0.6002.18005 C:\Windows\system32 745d0000 PROPSYS.dll 7.0.6002.18005 C:\Windows\system32 74690000 sfc_os.dll 6.0.6001.18000 C:\Windows\system32 746e0000 NLAapi.dll 6.0.6001.18000 C:\Windows\system32 74710000 OLEACC.dll 7.0.6002.18155 C:\Windows\system32 74750000 WINMM.dll 6.0.6002.18005 C:\Windows\system32 74c20000 COMCTL32.dll 6.10.6002.18305 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3 75030000 MMDevApi.dll 6.0.6002.18005 C:\Windows\System32 750d0000 AVRT.dll 6.0.6001.18000 C:\Windows\system32 75110000 UxTheme.dll 6.0.6001.18000 C:\Windows\system32 75360000 WINTRUST.dll 6.0.6002.18169 C:\Windows\system32 75390000 NTMARTA.DLL 6.0.6002.18005 C:\Windows\system32 75570000 mswsock.dll 6.0.6002.18005 C:\Windows\system32 755b0000 POWRPROF.dll 6.0.6002.18005 C:\Windows\system32 75750000 wship6.dll 6.0.6001.18000 C:\Windows\System32 75760000 wshtcpip.dll 6.0.6001.18000 C:\Windows\System32 757f0000 VERSION.dll 6.0.6002.18005 C:\Windows\system32 758c0000 dhcpcsvc6.DLL 6.0.6002.18005 C:\Windows\system32 758f0000 WINNSI.DLL 6.0.6001.18000 C:\Windows\system32 75900000 dhcpcsvc.DLL 6.0.6002.18005 C:\Windows\system32 75940000 IPHLPAPI.DLL 6.0.6002.18005 C:\Windows\system32 759e0000 CRYPT32.dll 6.0.6002.18005 C:\Windows\system32 75ae0000 MPR.dll 6.0.6002.18005 C:\Windows\system32 75b40000 MSASN1.dll 6.0.6002.18106 C:\Windows\system32 75b60000 SAMLIB.dll 6.0.6002.18005 C:\Windows\system32 75b80000 DNSAPI.dll 6.0.6002.18005 C:\Windows\system32 75da0000 NETAPI32.dll 6.0.6002.18005 C:\Windows\system32 75ee0000 apphelp.dll 6.0.6002.18005 C:\Windows\system32 75f40000 Secur32.dll 6.0.6002.18051 C:\Windows\system32 75f60000 USERENV.dll 6.0.6002.18005 C:\Windows\system32 760a0000 iertutil.dll 8.0.6001.18975 C:\Windows\system32 76290000 IMAGEHLP.dll 6.0.6001.18000 C:\Windows\system32 762c0000 msvcrt.dll 7.0.6002.18005 C:\Windows\system32 76370000 CLBCatQ.DLL 2001.12.6931.18000 C:\Windows\system32 76400000 GDI32.dll 6.0.6002.18005 C:\Windows\system32 76450000 OLEAUT32.dll 6.0.6002.18005 C:\Windows\system32 764e0000 SHELL32.dll 6.0.6002.18287 C:\Windows\system32 76ff0000 urlmon.dll 8.0.6001.18975 C:\Windows\system32 77220000 WS2_32.dll 6.0.6001.18000 C:\Windows\system32 77250000 ole32.dll 6.0.6002.18277 C:\Windows\system32 773a0000 USP10.dll 1.626.6002.18244 C:\Windows\system32 77420000 WLDAP32.dll 6.0.6002.18005 C:\Windows\system32 77470000 comdlg32.dll 6.0.6002.18005 C:\Windows\system32 774f0000 SHLWAPI.dll 6.0.6002.18005 C:\Windows\system32 77550000 MSCTF.dll 6.0.6002.18005 C:\Windows\system32 77620000 USER32.dll 6.0.6002.18005 C:\Windows\system32 776c0000 kernel32.dll 6.0.6002.18005 C:\Windows\system32 777a0000 SETUPAPI.dll 6.0.6002.18005 C:\Windows\system32 77930000 RPCRT4.dll 6.0.6002.18024 C:\Windows\system32 77a00000 ntdll.dll 6.0.6002.18005 C:\Windows\system32 77b30000 PSAPI.DLL 6.0.6000.16386 C:\Windows\system32 77b50000 IMM32.dll 6.0.6002.18005 C:\Windows\system32 77b70000 LPK.DLL 6.0.6002.18051 C:\Windows\system32 77b80000 NSI.dll 6.0.6001.18000 C:\Windows\system32 77b90000 ADVAPI32.dll 6.0.6002.18005 C:\Windows\system32 processes: 0000 Idle 0 0 0 0004 System 0 0 0 018c smss.exe 0 0 0 0218 csrss.exe 0 0 0 0254 wininit.exe 0 0 0 0260 csrss.exe 1 0 0 0280 services.exe 0 0 0 028c lsass.exe 0 0 0 0294 lsm.exe 0 0 0 02e0 winlogon.exe 1 0 0 0350 svchost.exe 0 0 0 03a0 svchost.exe 0 0 0 03d4 svchost.exe 0 0 0 041c Ati2evxx.exe 0 0 0 0430 svchost.exe 0 0 0 0450 svchost.exe 0 0 0 045c svchost.exe 0 0 0 04c4 audiodg.exe 0 0 0 04e4 svchost.exe 0 0 0 0504 SLsvc.exe 0 0 0 0540 svchost.exe 0 0 0 05e4 svchost.exe 0 0 0 0640 AvastSvc.exe 0 0 0 065c Ati2evxx.exe 1 0 0 07c4 spoolsv.exe 0 0 0 07e4 svchost.exe 0 0 0 039c LeverageService.exe 0 0 0 0114 svchost.exe 0 0 0 0184 svchost.exe 0 0 0 082c TnglCtrl.exe 0 0 0 087c ViewpointService.exe 0 0 0 088c svchost.exe 0 0 0 08f8 XAudio.exe 0 0 0 0910 WUDFHost.exe 0 0 0 0ba8 taskeng.exe 0 0 0 0f9c taskeng.exe 1 30 21 normal C:\Windows\system32 0fc8 Dwm.exe 1 14 2 high C:\Windows\system32 0594 Explorer.EXE 1 514 316 normal C:\Windows 02a8 LWEMon.exe 1 24 14 normal C:\Program Files\Logitech\Gaming Software 0a78 AvastUI.exe 1 104 31 normal C:\Program Files\Alwil Software\Avast5 0a08 ViewMgr.exe 1 15 11 normal C:\Program Files\Viewpoint\Viewpoint Manager 0a8c MOM.exe 1 10 9 normal C:\Program Files\ATI Technologies\ATI.ACE\Core-Static 0a80 SetPoint.exe 1 21 24 normal C:\Program Files\Logitech\SetPoint 0c20 wmpnetwk.exe 0 0 0 0cc8 KHALMNPR.EXE 1 9 17 normal C:\Program Files\Common Files\Logishrd\KHAL2 0a28 CCC.exe 1 39 43 normal C:\Program Files\ATI Technologies\ATI.ACE\Core-Static 1060 SearchIndexer.exe 0 0 0 06e0 AAWService.exe 0 0 0 0e94 unsecapp.exe 0 0 0 13dc WmiPrvSE.exe 0 0 0 16e0 AAWTray.exe 1 44 11 normal C:\Program Files\Lavasoft\Ad-Aware 17c4 MpCmdRun.exe 0 0 0 15a4 Armada2.exe 1 76 46 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data hardware: + Computer - ACPI x86-based PC + Disk drives - Generic USB CF Reader USB Device - Generic USB MS Reader USB Device - Generic USB SD Reader USB Device - Generic USB SM Reader USB Device - Hitachi HDS721616PLA380 ATA Device + Display adapters - Radeon X300/X550/X1050 Series (driver 8.593.100.0) - Radeon X300/X550/X1050 Series Secondary (driver 8.593.100.0) + DVD/CD-ROM drives - ATAPI DVD W DH16W1P ATA Device + Human Interface Devices - Logitech MOMO Racing (HID) (driver 5.4.108.0) - Logitech MOMO Racing USB (driver 5.4.108.0) - Logitech Virtual Hid Device (driver 5.4.108.0) - Logitech Virtual Hid Device (driver 5.4.108.0) + IDE ATA/ATAPI controllers - IDE Channel - IDE Channel - IDE Channel - Intel(R) 82801G (ICH7 Family) Ultra ATA Storage Controllers - 27DF - Intel(R) 82801GB/GR/GH (ICH7 Family) Serial ATA Storage Controller - 27C0 + Keyboards - HID Keyboard Device - PS/2 Keyboard (driver 4.72.24.0) + Mice and other pointing devices - HID-compliant mouse - PS/2 Compatible Mouse (driver 4.72.24.0) + Modems - PCI Soft Data Fax Modem with SmartCP (driver 7.67.0.0) + Monitors - Generic Non-PnP Monitor + Network adapters - Intel(R) PRO/100 VE Network Connection - TAP-Win32 Adapter V9 (Tunngle) (driver 9.0.0.6) + Portable Devices - USB CF Reader - USB MS Reader - USB SD Reader - USB SM Reader + Ports (COM & LPT) - Communications Port (COM1) - Printer Port (LPT1) + Processors - Intel(R) Pentium(R) 4 CPU 3.00GHz - Intel(R) Pentium(R) 4 CPU 3.00GHz + Sound, video and game controllers - High Definition Audio Device + Storage controllers - Microsoft iSCSI Initiator + Storage volume shadow copies - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy + System devices - ACPI Fixed Feature Button - ACPI Sleep Button - Advanced programmable interrupt controller - Direct memory access controller - High Definition Audio Controller - High precision event timer - Intel(R) 82801 PCI Bridge - 244E - Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D0 - Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D4 - Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D6 - Intel(R) 82801G (ICH7 Family) SMBus Controller - 27DA - Intel(R) 82801GH (ICH7DH) LPC Interface Controller - 27B0 - Intel(R) 82801GR/GH/GHM (ICH7 Family) PCI Express Root Port - 27E0 - Intel(R) 82801GR/GH/GHM (ICH7 Family) PCI Express Root Port - 27E2 - Intel(R) 945G/GZ/P/PL PCI Express Root Port - 2771 - Intel(R) 945G/GZ/P/PL Processor to I/O Controller - 2770 - Logitech Virtual Bus Enumerator (driver 5.4.108.0) - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Motherboard resources - Motherboard resources - Numeric data processor - PCI bus - Plug and Play Software Device Enumerator - Printer Port Logical Interface - Programmable interrupt controller - System CMOS/real time clock - System speaker - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - UMBus Enumerator - UMBus Enumerator - UMBus Root Bus Enumerator - Volume Manager + Universal Serial Bus controllers - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C8 - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C9 - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CA - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CB - Intel(R) 82801G (ICH7 Family) USB2 Enhanced Host Controller - 27CC - USB Mass Storage Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub cpu registers: eax = 00000000 ebx = 05145928 ecx = 00000080 edx = 003f8da8 esi = 006f4c54 edi = 003f8da8 eip = 0053c334 esp = 0012fa68 ebp = 0012faa4 stack dump: 0012fa68 50 aa e5 04 70 23 0e 05 - 28 59 14 05 80 fa 12 00 P...p#..(Y...... 0012fa78 c1 ef 53 00 f1 d9 7a 3e - b0 fa 12 00 de 86 48 00 ..S...z>......H. 0012fa88 1d 87 48 00 70 23 0e 05 - 01 00 00 00 00 00 00 00 ..H.p#.......... 0012fa98 00 00 00 00 00 00 00 00 - 00 00 00 00 b0 fa 12 00 ................ 0012faa8 26 14 40 00 28 59 14 05 - 38 fc 12 00 0d 26 60 00 &.@.(Y..8....&`. 0012fab8 28 59 14 05 3d 35 2d 76 - 03 9c 2c 76 00 00 3f 00 (Y..=5-v..,v..?. 0012fac8 00 00 00 00 10 9c 2c 76 - 00 f0 e7 1c 74 aa e5 04 ......,v....t... 0012fad8 74 aa e5 04 7c fe 12 00 - c0 f8 e7 1c 05 00 00 00 t...|........... 0012fae8 14 fb 12 00 ac 55 14 05 - d0 fa 12 00 ac 55 14 05 .....U.......U.. 0012faf8 60 fb 12 00 7d e4 2d 76 - 10 97 d9 6a fe ff ff ff `...}.-v...j.... 0012fb08 10 9c 2c 76 78 f2 d5 6d - 48 e1 18 05 09 00 00 00 ..,vx..mH....... 0012fb18 30 fb 12 00 e5 d6 d6 6d - 01 00 00 00 74 65 63 68 0......m....tech 0012fb28 31 2e 74 74 00 00 00 00 - 24 f4 12 00 cb af 54 00 1.tt....$.....T. 0012fb38 88 f9 12 00 05 00 00 00 - 6c 2e 71 00 88 f9 12 00 ........l.q..... 0012fb48 00 00 00 00 64 2e 71 00 - 88 f9 12 00 00 00 80 bf ....d.q......... 0012fb58 5c 2e 71 00 88 f9 12 00 - 00 00 80 bf 54 2e 71 00 \.q.........T.q. 0012fb68 88 f9 12 00 68 29 36 09 - 01 09 87 76 77 1f e1 42 ....h)6....vw..B 0012fb78 00 00 00 00 00 00 00 00 - 00 00 00 00 00 f4 12 00 ................ 0012fb88 90 f5 95 03 a0 f9 12 00 - ce 22 6a 00 ff ff ff ff ........."j..... 0012fb98 38 f4 12 00 18 37 60 00 - 88 f9 12 00 66 65 64 65 8....7`.....fede disassembling: 5a9f4dac public FleetOpsFunctionsHook.DebugException_Execute_New: ; function entry point 5a9f4dac 5045 push ebp 5a9f4dad mov ebp, esp 5a9f4daf push 0 5a9f4db1 push 0 5a9f4db3 push ebx 5a9f4db4 push esi 5a9f4db5 push edi 5a9f4db6 xor eax, eax 5a9f4db8 push ebp 5a9f4db9 push $5a9f4e5a ; System.@HandleFinally 5a9f4dbe push dword ptr fs:[eax] 5a9f4dc1 mov fs:[eax], esp 5a9f4dc4 5046 mov eax, [ebp+8] 5a9f4dc7 5047 xor edx, edx 5a9f4dc9 push ebp 5a9f4dca push $5a9f4de1 ; System.@HandleAnyException 5a9f4dcf push dword ptr fs:[edx] 5a9f4dd2 mov fs:[edx], esp 5a9f4dd5 5048 > call eax 5a9f4dd5 5a9f4dd7 xor eax, eax 5a9f4dd9 pop edx 5a9f4dda pop ecx 5a9f4ddb pop ecx 5a9f4ddc mov fs:[eax], edx 5a9f4ddf jmp loc_5a9f4e3c 5a9f4ddf 5a9f4ddf ; --------------------------------------------------------- 5a9f4ddf 5a9f4de1 jmp -$1f0272 ($5a804b74) ; System.@HandleAnyException 5a9f4de1 5a9f4de6 5050 push 1 5a9f4de8 push 0 5a9f4dea push 0 5a9f4dec push 0 5a9f4dee push 0 5a9f4df0 push 0 5a9f4df2 push 0 5a9f4df4 push 0 [...] date/time : 2010-10-26, 19:31:39, 907ms computer name : HOME user name : me registered owner : me operating system : Windows Vista Service Pack 2 build 6002 system language : English system up time : 5 days 21 hours program up time : 18 seconds processors : 2x Intel(R) Pentium(R) 4 CPU 3.00GHz physical memory : 886/2045 MB (free/total) free disk space : (C:) 49.96 GB display mode : 1440x900, 32 bit process id : $4e0 allocated memory : 120.73 MB executable : Armada2.exe current module : FleetOpsHook.dll module date/time : 2010-07-12 04:50 compiled with : Delphi 2006/07 madExcept version : 3.0l callstack crc : $3e0839f5, $d96eb256, $d96eb256 count : 10 exception number : 1 exception class : EAccessViolation exception message : Access violation at address 0053C334 in module 'Armada2.exe'. Read of address 00000008. Main ($1300): 0053c334 +084 Armada2.exe RtimeClass.Load 00401421 +021 Armada2.exe AiMission.LoadMission 00602608 +378 Armada2.exe LoadGame_MainLoad 00602fb4 +2a4 Armada2.exe LoadGame 00484d70 +030 Armada2.exe Program.GameOpenLoad 00485897 +117 Armada2.exe Program.GameOpen 00487246 +166 Armada2.exe Program.GameDoOne 00486b44 +544 Armada2.exe Program.MainLoop 00476092 +122 Armada2.exe _WinMain@16 5a9f4dd5 +029 FleetOpsHook.dll FleetOpsFunctionsHook 5048 +3 DebugException_Execute_New 5a9f4eba +052 FleetOpsHook.dll FleetOpsFunctionsHook 5084 +19 A2_WinMain 006734ef +12f Armada2.exe _WinMainCRTStartup 75c9d0e7 +010 kernel32.dll BaseThreadInitThunk thread $1388: 775d57ae +0a ntdll.dll NtWaitForWorkViaWorkerFactory 75c9d0e7 +10 kernel32.dll BaseThreadInitThunk thread $ba4: 775d57ae +0a ntdll.dll NtWaitForWorkViaWorkerFactory 75c9d0e7 +10 kernel32.dll BaseThreadInitThunk thread $149c: 775d560e +0a ntdll.dll NtWaitForMultipleObjects 75c9a5d1 +ef kernel32.dll WaitForMultipleObjectsEx 75c9a6eb +13 kernel32.dll WaitForMultipleObjects 75c9d0e7 +10 kernel32.dll BaseThreadInitThunk thread $7d8: 775d560e +0a ntdll.dll NtWaitForMultipleObjects 75c9a5d1 +ef kernel32.dll WaitForMultipleObjectsEx 75c9a6eb +13 kernel32.dll WaitForMultipleObjects 75c9d0e7 +10 kernel32.dll BaseThreadInitThunk thread $13bc: 775d555e +0a ntdll.dll NtTraceControl 7757f6bb +40 ntdll.dll EtwpNotificationThread 75c9d0e7 +10 kernel32.dll BaseThreadInitThunk thread $d68: 775d560e +0a ntdll.dll NtWaitForMultipleObjects 75c9a5d1 +ef kernel32.dll WaitForMultipleObjectsEx 75c9a6eb +13 kernel32.dll WaitForMultipleObjects 75c9d0e7 +10 kernel32.dll BaseThreadInitThunk thread $a78: 775d560e +0a ntdll.dll NtWaitForMultipleObjects 75c9d0e7 +10 kernel32.dll BaseThreadInitThunk thread $e58: 775d560e +0a ntdll.dll NtWaitForMultipleObjects 75c9a5d1 +ef kernel32.dll WaitForMultipleObjectsEx 75c9a6eb +13 kernel32.dll WaitForMultipleObjects 00463ce7 +57 Armada2.exe BinkThread.sStreamThreadFunction 75c9d0e7 +10 kernel32.dll BaseThreadInitThunk modules: 00400000 Armada2.exe 43.0.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 04070000 Tunngle.dll 1.0.3.1 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 10000000 NetworkManager.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 10100000 lgscroll.dll 4.72.40.0 C:\Program Files\Logitech\SetPoint 10d00000 GameHook.dll 4.72.40.0 C:\Program Files\Logitech\SetPoint 30000000 binkw32.dll 1.5.21.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 4a800000 Win2kDisableTaskSwitch.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 5a800000 FleetOpsHook.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations 62e50000 atiumdva.dll 7.14.10.218 C:\Windows\system32 64150000 d3dx9_33.dll 9.18.904.15 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 64fd0000 AcGenral.DLL 6.0.6002.18244 C:\Windows\AppPatch 65660000 d3d8.dll 6.0.6001.18000 C:\Windows\system32 66e10000 DSOUND.dll 6.0.6002.18005 C:\Windows\system32 66f80000 MSVCP60.dll 7.0.6002.18005 C:\Windows\system32 67330000 ShimEng.dll 6.0.6000.16386 C:\Windows\system32 6b1f0000 MSVFW32.dll 6.0.6002.18158 C:\Windows\system32 6b830000 sfc.dll 6.0.6000.16386 C:\Windows\system32 6cd60000 pnrpnsp.dll 6.0.6001.18000 C:\Windows\system32 6d160000 winrnr.dll 6.0.6002.18005 C:\Windows\System32 6d360000 napinsp.dll 6.0.6001.18000 C:\Windows\system32 6db70000 rasadhlp.dll 6.0.6000.16386 C:\Windows\system32 6f040000 Fwpuclnt.dll 6.0.6002.18005 C:\Windows\system32 720f0000 MSVCR80.dll 8.0.50727.4053 C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d08d7da0442a985d 72c60000 atiumdag.dll 8.14.10.647 C:\Windows\system32 734b0000 d3d9.dll 6.0.6002.18005 C:\Windows\system32 73ca0000 MSACM32.dll 6.0.6001.18000 C:\Windows\system32 73d20000 audioeng.dll 6.0.6001.18000 C:\Windows\system32 73d90000 AUDIOSES.DLL 6.0.6002.18005 C:\Windows\system32 73df0000 PROPSYS.dll 7.0.6002.18005 C:\Windows\system32 73f00000 NLAapi.dll 6.0.6001.18000 C:\Windows\system32 73f50000 WINMM.dll 6.0.6002.18005 C:\Windows\system32 74420000 MMDevApi.dll 6.0.6002.18005 C:\Windows\System32 74480000 UxTheme.dll 6.0.6001.18000 C:\Windows\system32 74760000 AVRT.dll 6.0.6001.18000 C:\Windows\system32 74770000 WINTRUST.dll 6.0.6002.18169 C:\Windows\system32 74920000 wshtcpip.dll 6.0.6001.18000 C:\Windows\System32 74960000 AVIFIL32.dll 6.0.6002.18158 C:\Windows\system32 74980000 sfc_os.dll 6.0.6001.18000 C:\Windows\system32 74a20000 NTMARTA.DLL 6.0.6002.18005 C:\Windows\system32 74ab0000 d3d8thk.dll 6.0.6000.16386 C:\Windows\system32 74d40000 COMCTL32.dll 6.10.6002.18305 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3 74f20000 mswsock.dll 6.0.6002.18005 C:\Windows\system32 74f60000 POWRPROF.dll 6.0.6002.18005 C:\Windows\system32 74f80000 wship6.dll 6.0.6001.18000 C:\Windows\System32 75210000 VERSION.dll 6.0.6002.18005 C:\Windows\system32 75240000 dwmapi.dll 6.0.6001.18000 C:\Windows\system32 75260000 OLEACC.dll 7.0.6002.18155 C:\Windows\system32 752d0000 dhcpcsvc6.DLL 6.0.6002.18005 C:\Windows\system32 75300000 dhcpcsvc.DLL 6.0.6002.18005 C:\Windows\system32 75340000 IPHLPAPI.DLL 6.0.6002.18005 C:\Windows\system32 753e0000 MPR.dll 6.0.6002.18005 C:\Windows\system32 75440000 SAMLIB.dll 6.0.6002.18005 C:\Windows\system32 75620000 DNSAPI.dll 6.0.6002.18005 C:\Windows\system32 75650000 WINNSI.DLL 6.0.6001.18000 C:\Windows\system32 756b0000 wsock32.dll 6.0.6001.18000 C:\Windows\system32 757b0000 MSASN1.dll 6.0.6002.18106 C:\Windows\system32 757d0000 CRYPT32.dll 6.0.6002.18005 C:\Windows\system32 75910000 NETAPI32.dll 6.0.6002.18005 C:\Windows\system32 75a50000 apphelp.dll 6.0.6002.18005 C:\Windows\system32 75ab0000 Secur32.dll 6.0.6002.18051 C:\Windows\system32 75ad0000 USERENV.dll 6.0.6002.18005 C:\Windows\system32 75c10000 PSAPI.DLL 6.0.6000.16386 C:\Windows\system32 75c20000 WS2_32.dll 6.0.6001.18000 C:\Windows\system32 75c50000 kernel32.dll 6.0.6002.18005 C:\Windows\system32 75d30000 OLEAUT32.dll 6.0.6002.18005 C:\Windows\system32 75dc0000 USP10.dll 1.626.6002.18244 C:\Windows\system32 75e40000 SHELL32.dll 6.0.6002.18287 C:\Windows\system32 76950000 LPK.DLL 6.0.6002.18051 C:\Windows\system32 76960000 GDI32.dll 6.0.6002.18005 C:\Windows\system32 769b0000 NSI.dll 6.0.6001.18000 C:\Windows\system32 769c0000 comdlg32.dll 6.0.6002.18005 C:\Windows\system32 76a40000 CLBCatQ.DLL 2001.12.6931.18000 C:\Windows\system32 76ad0000 IMAGEHLP.dll 6.0.6001.18000 C:\Windows\system32 76b00000 ADVAPI32.dll 6.0.6002.18005 C:\Windows\system32 76bd0000 MSCTF.dll 6.0.6002.18005 C:\Windows\system32 76ca0000 urlmon.dll 8.0.6001.18975 C:\Windows\system32 76de0000 WLDAP32.dll 6.0.6002.18005 C:\Windows\system32 76f20000 msvcrt.dll 7.0.6002.18005 C:\Windows\system32 76fd0000 ole32.dll 6.0.6002.18277 C:\Windows\system32 77120000 SETUPAPI.dll 6.0.6002.18005 C:\Windows\system32 772b0000 RPCRT4.dll 6.0.6002.18024 C:\Windows\system32 77380000 iertutil.dll 8.0.6001.18975 C:\Windows\system32 77570000 ntdll.dll 6.0.6002.18005 C:\Windows\system32 776b0000 SHLWAPI.dll 6.0.6002.18005 C:\Windows\system32 77710000 IMM32.dll 6.0.6002.18005 C:\Windows\system32 77730000 USER32.dll 6.0.6002.18005 C:\Windows\system32 processes: 0000 Idle 0 0 0 0004 System 0 0 0 0188 smss.exe 0 0 0 0218 csrss.exe 0 0 0 0258 wininit.exe 0 0 0 0264 csrss.exe 1 0 0 0284 services.exe 0 0 0 02a8 lsass.exe 0 0 0 02b0 lsm.exe 0 0 0 02f8 winlogon.exe 1 0 0 036c svchost.exe 0 0 0 03b4 svchost.exe 0 0 0 03d8 svchost.exe 0 0 0 041c Ati2evxx.exe 0 0 0 0440 svchost.exe 0 0 0 0460 svchost.exe 0 0 0 0470 svchost.exe 0 0 0 04d8 audiodg.exe 0 0 0 04f0 svchost.exe 0 0 0 0508 SLsvc.exe 0 0 0 0548 svchost.exe 0 0 0 05e8 svchost.exe 0 0 0 064c AvastSvc.exe 0 0 0 068c Ati2evxx.exe 1 0 0 0790 Dwm.exe 1 14 2 high C:\Windows\system32 07b0 Explorer.EXE 1 293 182 normal C:\Windows 011c MSASCui.exe 1 146 146 normal C:\Program Files\Windows Defender 0198 LWEMon.exe 1 24 14 normal C:\Program Files\Logitech\Gaming Software 01a0 jusched.exe 1 9 2 normal C:\Program Files\Common Files\Java\Java Update 01b0 MOM.exe 1 10 9 normal C:\Program Files\ATI Technologies\ATI.ACE\Core-Static 01b4 AvastUI.exe 1 108 31 normal C:\Program Files\Alwil Software\Avast5 02ac SetPoint.exe 1 21 25 normal C:\Program Files\Logitech\SetPoint 059c KHALMNPR.EXE 1 9 18 normal C:\Program Files\Common Files\Logishrd\KHAL2 0424 spoolsv.exe 0 0 0 00f8 taskeng.exe 1 29 24 normal C:\Windows\system32 0700 svchost.exe 0 0 0 0964 LeverageService.exe 0 0 0 0a04 svchost.exe 0 0 0 0a18 svchost.exe 0 0 0 0a44 TnglCtrl.exe 0 0 0 0b24 ViewpointService.exe 0 0 0 0b34 svchost.exe 0 0 0 0b4c SearchIndexer.exe 0 0 0 0b80 XAudio.exe 0 0 0 0c34 WUDFHost.exe 0 0 0 0de4 CCC.exe 1 39 43 normal C:\Program Files\ATI Technologies\ATI.ACE\Core-Static 0ee0 wmplayer.exe 1 337 69 normal C:\Program Files\Windows Media Player 0f98 taskeng.exe 0 0 0 0fc8 ViewMgr.exe 1 15 11 normal C:\Program Files\Viewpoint\Viewpoint Manager 085c wmpnetwk.exe 0 0 0 1320 MpCmdRun.exe 0 0 0 00ac AAWService.exe 0 0 0 0e3c unsecapp.exe 0 0 0 0ad0 WmiPrvSE.exe 0 0 0 17c0 AAWTray.exe 1 44 11 normal C:\Program Files\Lavasoft\Ad-Aware 11c0 wmpnscfg.exe 1 25 13 normal C:\Program Files\Windows Media Player 04e0 Armada2.exe 1 76 46 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data hardware: + Computer - ACPI x86-based PC + Disk drives - Generic USB CF Reader USB Device - Generic USB MS Reader USB Device - Generic USB SD Reader USB Device - Generic USB SM Reader USB Device - Hitachi HDS721616PLA380 ATA Device + Display adapters - Radeon X300/X550/X1050 Series (driver 8.593.100.0) - Radeon X300/X550/X1050 Series Secondary (driver 8.593.100.0) + DVD/CD-ROM drives - ATAPI DVD W DH16W1P ATA Device + Human Interface Devices - Logitech MOMO Racing (HID) (driver 5.4.108.0) - Logitech MOMO Racing USB (driver 5.4.108.0) - Logitech Virtual Hid Device (driver 5.4.108.0) - Logitech Virtual Hid Device (driver 5.4.108.0) + IDE ATA/ATAPI controllers - IDE Channel - IDE Channel - IDE Channel - Intel(R) 82801G (ICH7 Family) Ultra ATA Storage Controllers - 27DF - Intel(R) 82801GB/GR/GH (ICH7 Family) Serial ATA Storage Controller - 27C0 + Keyboards - HID Keyboard Device - PS/2 Keyboard (driver 4.72.24.0) + Mice and other pointing devices - HID-compliant mouse - PS/2 Compatible Mouse (driver 4.72.24.0) + Modems - PCI Soft Data Fax Modem with SmartCP (driver 7.67.0.0) + Monitors - Generic Non-PnP Monitor + Network adapters - Intel(R) PRO/100 VE Network Connection - TAP-Win32 Adapter V9 (Tunngle) (driver 9.0.0.6) + Portable Devices - USB CF Reader - USB MS Reader - USB SD Reader - USB SM Reader + Ports (COM & LPT) - Communications Port (COM1) - Printer Port (LPT1) + Processors - Intel(R) Pentium(R) 4 CPU 3.00GHz - Intel(R) Pentium(R) 4 CPU 3.00GHz + Sound, video and game controllers - High Definition Audio Device + Storage controllers - Microsoft iSCSI Initiator + Storage volume shadow copies - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy + System devices - ACPI Fixed Feature Button - ACPI Sleep Button - Advanced programmable interrupt controller - Direct memory access controller - High Definition Audio Controller - High precision event timer - Intel(R) 82801 PCI Bridge - 244E - Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D0 - Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D4 - Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D6 - Intel(R) 82801G (ICH7 Family) SMBus Controller - 27DA - Intel(R) 82801GH (ICH7DH) LPC Interface Controller - 27B0 - Intel(R) 82801GR/GH/GHM (ICH7 Family) PCI Express Root Port - 27E0 - Intel(R) 82801GR/GH/GHM (ICH7 Family) PCI Express Root Port - 27E2 - Intel(R) 945G/GZ/P/PL PCI Express Root Port - 2771 - Intel(R) 945G/GZ/P/PL Processor to I/O Controller - 2770 - Logitech Virtual Bus Enumerator (driver 5.4.108.0) - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Motherboard resources - Motherboard resources - Numeric data processor - PCI bus - Plug and Play Software Device Enumerator - Printer Port Logical Interface - Programmable interrupt controller - System CMOS/real time clock - System speaker - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - UMBus Enumerator - UMBus Enumerator - UMBus Root Bus Enumerator - Volume Manager + Universal Serial Bus controllers - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C8 - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C9 - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CA - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CB - Intel(R) 82801G (ICH7 Family) USB2 Enhanced Host Controller - 27CC - USB Mass Storage Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub cpu registers: eax = 00000000 ebx = 05255968 ecx = 00000080 edx = 00e68da8 esi = 006f4c54 edi = 00e68da8 eip = 0053c334 esp = 0012fa68 ebp = 0012faa4 stack dump: 0012fa68 a8 68 f6 04 b0 5b 1f 05 - 68 59 25 05 80 fa 12 00 .h...[..hY%..... 0012fa78 c1 ef 53 00 ec 85 f2 3e - b0 fa 12 00 de 86 48 00 ..S....>......H. 0012fa88 1d 87 48 00 b0 5b 1f 05 - 01 00 00 00 1f 1d 50 9e ..H..[........P. 0012fa98 00 00 00 00 00 00 00 00 - 00 00 00 00 b0 fa 12 00 ................ 0012faa8 26 14 40 00 68 59 25 05 - 38 fc 12 00 0d 26 60 00 &.@.hY%.8....&`. 0012fab8 68 59 25 05 3d 35 f3 76 - 03 9c f2 76 00 00 e6 00 hY%.=5.v...v.... 0012fac8 00 00 00 00 10 9c f2 76 - fb 6d 2d 3d cc 68 f6 04 .......v.m-=.h.. 0012fad8 cc 68 f6 04 7c fe 12 00 - 00 56 25 05 10 00 00 00 .h..|....V%..... 0012fae8 00 56 25 05 d4 fa 12 00 - d0 fa 12 00 81 50 fd 66 .V%..........P.f 0012faf8 60 fb 12 00 7d e4 f3 76 - eb 0a cd 4b fe ff ff ff `...}..v...K.... 0012fb08 10 9c f2 76 78 f2 fa 66 - b8 81 29 05 0e 00 00 00 ...vx..f..)..... 0012fb18 30 fb 12 00 e5 d6 fb 66 - 01 00 00 00 74 65 63 68 0......f....tech 0012fb28 31 2e 74 74 00 00 00 00 - 2c f4 12 00 cb af 54 00 1.tt....,.....T. 0012fb38 90 f9 12 00 00 00 00 00 - 6c 2e 71 00 90 f9 12 00 ........l.q..... 0012fb48 00 00 00 00 64 2e 71 00 - 90 f9 12 00 00 00 80 bf ....d.q......... 0012fb58 5c 2e 71 00 90 f9 12 00 - 00 00 80 bf 54 2e 71 00 \.q.........T.q. 0012fb68 90 f9 12 00 d0 c0 66 1a - 01 09 02 76 9a 6b 99 f7 ......f....v.k.. 0012fb78 00 00 00 00 00 00 00 00 - 00 00 00 00 08 f4 12 00 ................ 0012fb88 a8 17 9e 04 a8 f9 12 00 - ce 22 6a 00 ff ff ff ff ........."j..... 0012fb98 40 f4 12 00 18 37 60 00 - 90 f9 12 00 66 65 64 65 @....7`.....fede disassembling: 5a9f4dac public FleetOpsFunctionsHook.DebugException_Execute_New: ; function entry point 5a9f4dac 5045 push ebp 5a9f4dad mov ebp, esp 5a9f4daf push 0 5a9f4db1 push 0 5a9f4db3 push ebx 5a9f4db4 push esi 5a9f4db5 push edi 5a9f4db6 xor eax, eax 5a9f4db8 push ebp 5a9f4db9 push $5a9f4e5a ; System.@HandleFinally 5a9f4dbe push dword ptr fs:[eax] 5a9f4dc1 mov fs:[eax], esp 5a9f4dc4 5046 mov eax, [ebp+8] 5a9f4dc7 5047 xor edx, edx 5a9f4dc9 push ebp 5a9f4dca push $5a9f4de1 ; System.@HandleAnyException 5a9f4dcf push dword ptr fs:[edx] 5a9f4dd2 mov fs:[edx], esp 5a9f4dd5 5048 > call eax 5a9f4dd5 5a9f4dd7 xor eax, eax 5a9f4dd9 pop edx 5a9f4dda pop ecx 5a9f4ddb pop ecx 5a9f4ddc mov fs:[eax], edx 5a9f4ddf jmp loc_5a9f4e3c 5a9f4ddf 5a9f4ddf ; --------------------------------------------------------- 5a9f4ddf 5a9f4de1 jmp -$1f0272 ($5a804b74) ; System.@HandleAnyException 5a9f4de1 5a9f4de6 5050 push 1 5a9f4de8 push 0 5a9f4dea push 0 5a9f4dec push 0 5a9f4dee push 0 5a9f4df0 push 0 5a9f4df2 push 0 5a9f4df4 push 0 [...] date/time : 2010-12-01, 15:08:24, 949ms computer name : HOME user name : me registered owner : me operating system : Windows Vista Service Pack 2 build 6002 system language : English system up time : 29 days 1 hour program up time : 34 minutes 25 seconds processors : 2x Intel(R) Pentium(R) 4 CPU 3.00GHz physical memory : 919/2045 MB (free/total) free disk space : (C:) 49.46 GB display mode : 1440x900, 32 bit process id : $1690 allocated memory : 196.15 MB executable : Armada2.exe current module : FleetOpsHook.dll module date/time : 2010-11-29 13:15 version : 3.1.4 contact name : tim contact email : lmm086gf@yahoo.com callstack crc : $2e90f658, $91f4952d, $91f4952d count : 2 exception number : 1 exception class : EAccessViolation exception message : Access violation at address 004E68BE in module 'Armada2.exe'. Read of address 80000000. main thread ($15c4): 004e68be +01e Armada2.exe ControlButton.State 5a8e1f9f +00f FleetOpsHook.dll ArmadaFunctions 5561 +2 TControlButton.State 5a9be0d0 +404 FleetOpsHook.dll PopupPaletteEnhancement 267 +147 PopupPaletteImp_mUpdateButtonsAndPosition_New 004fb3ec +0bc Armada2.exe PopupPaletteImp.Update 004fbc62 +002 Armada2.exe PopupPaletteImp.AlwaysGameSimulate 00519e73 +033 Armada2.exe DisplayInterface.GenericSimulate 0051ab3b +1fb Armada2.exe DisplayInterface.SimulateAll 5a9accb0 +06c FleetOpsHook.dll FleetOpsFunctionsHook 2231 +26 DisplayInterface_SimulateAll_Callback 0048380a +18a Armada2.exe Program.DisplayInputProcess 00559b58 +0d8 Armada2.exe TransportLocal.GameExecute 00487293 +1b3 Armada2.exe Program.GameDoOne 00486b44 +544 Armada2.exe Program.MainLoop 0047608d +11d Armada2.exe _WinMain@16 5a9b09b9 +029 FleetOpsHook.dll FleetOpsFunctionsHook 4845 +3 DebugException_Execute_New 5a9b0b89 +0a1 FleetOpsHook.dll FleetOpsFunctionsHook 4908 +33 A2_WinMain 006734ef +12f Armada2.exe _WinMainCRTStartup 7790d0e7 +010 kernel32.dll BaseThreadInitThunk thread $1054: 77a557ae +0a ntdll.dll NtWaitForWorkViaWorkerFactory 7790d0e7 +10 kernel32.dll BaseThreadInitThunk thread $16a8: 77a5560e +0a ntdll.dll NtWaitForMultipleObjects 7790d0e7 +10 kernel32.dll BaseThreadInitThunk thread $1754: 77a5561e +0a ntdll.dll NtWaitForSingleObject 7790987e +7e kernel32.dll WaitForSingleObjectEx 779097ed +0d kernel32.dll WaitForSingleObject 7790d0e7 +10 kernel32.dll BaseThreadInitThunk thread $152c: 77a5561e +0a ntdll.dll NtWaitForSingleObject 7790987e +7e kernel32.dll WaitForSingleObjectEx 779097ed +0d kernel32.dll WaitForSingleObject 7790d0e7 +10 kernel32.dll BaseThreadInitThunk thread $5a4: 77a5477e +0a ntdll.dll NtDelayExecution 7790998a +4c kernel32.dll SleepEx 778c1c67 +0a kernel32.dll Sleep 7790d0e7 +10 kernel32.dll BaseThreadInitThunk thread $1434: 77a5477e +0a ntdll.dll NtDelayExecution 7790998a +4c kernel32.dll SleepEx 778c1c67 +0a kernel32.dll Sleep 7790d0e7 +10 kernel32.dll BaseThreadInitThunk thread $1150: 77a550ae +0a ntdll.dll NtRemoveIoCompletion 7790d118 +23 kernel32.dll GetQueuedCompletionStatus 7790d0e7 +10 kernel32.dll BaseThreadInitThunk thread $1270: 77a557ae +0a ntdll.dll NtWaitForWorkViaWorkerFactory 7790d0e7 +10 kernel32.dll BaseThreadInitThunk thread $a14: 77a550ae +0a ntdll.dll NtRemoveIoCompletion 7790d0e7 +10 kernel32.dll BaseThreadInitThunk thread $10e0: 77a5560e +0a ntdll.dll NtWaitForMultipleObjects 7790a5d1 +ef kernel32.dll WaitForMultipleObjectsEx 7790a6eb +13 kernel32.dll WaitForMultipleObjects 00463ce7 +57 Armada2.exe BinkThread.sStreamThreadFunction 7790d0e7 +10 kernel32.dll BaseThreadInitThunk thread $e38: 77a5477e +00a ntdll.dll NtDelayExecution 7790998a +04c kernel32.dll SleepEx 778c1c67 +00a kernel32.dll Sleep 004dd1f1 +191 Armada2.exe InputThreadFunction 7790d0e7 +010 kernel32.dll BaseThreadInitThunk modules: 00400000 Armada2.exe 43.0.0.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 02030000 fmodex.dll 0.4.32.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 03bd0000 Tunngle.dll 1.0.3.1 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 10000000 NetworkManager.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 10100000 lgscroll.dll 4.72.40.0 C:\Program Files\Logitech\SetPoint 10d00000 GameHook.dll 4.72.40.0 C:\Program Files\Logitech\SetPoint 18000000 binkw32.dll 1.9.16.0 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 4a800000 Win2kDisableTaskSwitch.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 5a800000 FleetOpsHook.dll C:\Program Files\Activision\Star Trek Armada II Fleet Operations 5e450000 atiumdva.dll 7.14.10.218 C:\Windows\system32 60020000 d3dx9_33.dll 9.18.904.15 C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data 64f40000 atiumdag.dll 8.14.10.647 C:\Windows\system32 65760000 AcGenral.DLL 6.0.6002.18301 C:\Windows\AppPatch 684e0000 d3d8.dll 6.0.6001.18000 C:\Windows\system32 68d10000 MSVFW32.dll 6.0.6002.18158 C:\Windows\system32 6ca60000 MSVCP60.dll 7.0.6002.18005 C:\Windows\system32 70720000 MSVCR80.dll 8.0.50727.4053 C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d08d7da0442a985d 72990000 AVIFIL32.dll 6.0.6002.18158 C:\Windows\system32 72c90000 DSOUND.dll 6.0.6002.18005 C:\Windows\system32 730f0000 d3d9.dll 6.0.6002.18005 C:\Windows\system32 734f0000 dwmapi.dll 6.0.6001.18000 C:\Windows\system32 73540000 d3d8thk.dll 6.0.6000.16386 C:\Windows\system32 73a30000 sfc.dll 6.0.6000.16386 C:\Windows\system32 73a70000 winrnr.dll 6.0.6002.18005 C:\Windows\System32 73b00000 rasadhlp.dll 6.0.6000.16386 C:\Windows\system32 73b10000 pnrpnsp.dll 6.0.6001.18000 C:\Windows\system32 73b30000 napinsp.dll 6.0.6001.18000 C:\Windows\system32 73b40000 sensapi.dll 6.0.6000.16386 C:\Windows\system32 73df0000 MSACM32.dll 6.0.6001.18000 C:\Windows\system32 73e10000 audioeng.dll 6.0.6001.18000 C:\Windows\system32 73e80000 COMCTL32.dll 5.82.6002.18305 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6002.18305_none_88f3a38569c2c436 73f10000 midimap.dll 6.0.6002.18005 C:\Windows\system32 73f20000 msacm32.drv 6.0.6002.18005 C:\Windows\system32 73f30000 AUDIOSES.DLL 6.0.6002.18005 C:\Windows\system32 73f60000 ksuser.dll 6.0.6000.16386 C:\Windows\system32 73f70000 wdmaud.drv 6.0.6002.18005 C:\Windows\system32 74260000 sfc_os.dll 6.0.6001.18000 C:\Windows\system32 74600000 wsock32.dll 6.0.6001.18000 C:\Windows\system32 74730000 MMDevApi.dll 6.0.6002.18005 C:\Windows\System32 74760000 PROPSYS.dll 7.0.6002.18005 C:\Windows\system32 74860000 NLAapi.dll 6.0.6001.18000 C:\Windows\system32 74870000 AVRT.dll 6.0.6001.18000 C:\Windows\system32 74880000 OLEACC.dll 7.0.6002.18155 C:\Windows\system32 748c0000 WINMM.dll 6.0.6002.18005 C:\Windows\system32 74bd0000 rtutils.dll 6.0.6002.18274 C:\Windows\system32 74be0000 TAPI32.dll 6.0.6000.16386 C:\Windows\system32 74c20000 RASAPI32.dll 6.0.6002.18005 C:\Windows\system32 74d60000 UxTheme.dll 6.0.6001.18000 C:\Windows\system32 74da0000 comctl32.dll 6.10.6002.18305 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3 74f70000 ShimEng.dll 6.0.6000.16386 C:\Windows\system32 751d0000 rasman.dll 6.0.6001.18000 C:\Windows\system32 751f0000 WINTRUST.dll 6.0.6002.18169 C:\Windows\system32 75380000 wshtcpip.dll 6.0.6001.18000 C:\Windows\System32 753a0000 POWRPROF.dll 6.0.6002.18005 C:\Windows\system32 753c0000 NTMARTA.DLL 6.0.6002.18005 C:\Windows\system32 754e0000 schannel.dll 6.0.6002.18290 C:\Windows\system32 756f0000 mswsock.dll 6.0.6002.18005 C:\Windows\system32 75750000 wship6.dll 6.0.6001.18000 C:\Windows\System32 75760000 VERSION.dll 6.0.6002.18005 C:\Windows\system32 75800000 credssp.dll 6.0.6001.18000 C:\Windows\system32 758c0000 dhcpcsvc6.DLL 6.0.6002.18005 C:\Windows\system32 758f0000 WINNSI.DLL 6.0.6001.18000 C:\Windows\system32 75900000 dhcpcsvc.DLL 6.0.6002.18005 C:\Windows\system32 75940000 IPHLPAPI.DLL 6.0.6002.18005 C:\Windows\system32 759e0000 CRYPT32.dll 6.0.6002.18005 C:\Windows\system32 75ae0000 MPR.dll 6.0.6002.18005 C:\Windows\system32 75b40000 MSASN1.dll 6.0.6002.18106 C:\Windows\system32 75b60000 SAMLIB.dll 6.0.6002.18005 C:\Windows\system32 75b80000 DNSAPI.dll 6.0.6002.18005 C:\Windows\system32 75d90000 NETAPI32.dll 6.0.6002.18005 C:\Windows\system32 75ed0000 apphelp.dll 6.0.6002.18005 C:\Windows\system32 75f30000 Secur32.dll 6.0.6002.18051 C:\Windows\system32 75f50000 USERENV.dll 6.0.6002.18005 C:\Windows\system32 76090000 PSAPI.DLL 6.0.6000.16386 C:\Windows\system32 760a0000 SHLWAPI.dll 6.0.6002.18005 C:\Windows\system32 76100000 WS2_32.dll 6.0.6001.18000 C:\Windows\system32 76130000 ADVAPI32.dll 6.0.6002.18005 C:\Windows\system32 76200000 urlmon.dll 8.0.6001.18975 C:\Windows\system32 76340000 IMAGEHLP.dll 6.0.6001.18000 C:\Windows\system32 76370000 USP10.dll 1.626.6002.18244 C:\Windows\system32 763f0000 MSCTF.dll 6.0.6002.18005 C:\Windows\system32 764c0000 CLBCatQ.DLL 2001.12.6931.18000 C:\Windows\system32 76550000 OLEAUT32.dll 6.0.6002.18005 C:\Windows\system32 765e0000 LPK.DLL 6.0.6002.18051 C:\Windows\system32 765f0000 GDI32.dll 6.0.6002.18005 C:\Windows\system32 76640000 comdlg32.dll 6.0.6002.18005 C:\Windows\system32 766c0000 msvcrt.dll 7.0.6002.18005 C:\Windows\system32 76770000 USER32.dll 6.0.6002.18005 C:\Windows\system32 76810000 SHELL32.dll 6.0.6002.18287 C:\Windows\system32 77320000 SETUPAPI.dll 6.0.6002.18005 C:\Windows\system32 774b0000 iertutil.dll 8.0.6001.18975 C:\Windows\system32 776a0000 RPCRT4.dll 6.0.6002.18024 C:\Windows\system32 77770000 ole32.dll 6.0.6002.18277 C:\Windows\system32 778c0000 kernel32.dll 6.0.6002.18005 C:\Windows\system32 779a0000 WLDAP32.dll 6.0.6002.18005 C:\Windows\system32 779f0000 ntdll.dll 6.0.6002.18005 C:\Windows\system32 77b20000 IMM32.dll 6.0.6002.18005 C:\Windows\system32 77b40000 NSI.dll 6.0.6001.18000 C:\Windows\system32 77b50000 Normaliz.dll 6.0.6000.16386 C:\Windows\system32 77b60000 wininet.dll 8.0.6001.18975 C:\Windows\system32 processes: 0000 Idle 0 0 0 0004 System 0 0 0 018c smss.exe 0 0 0 021c csrss.exe 0 0 0 025c wininit.exe 0 0 0 0264 csrss.exe 1 0 0 0288 services.exe 0 0 0 0294 lsass.exe 0 0 0 029c lsm.exe 0 0 0 02f0 winlogon.exe 1 0 0 0354 svchost.exe 0 0 0 03a0 svchost.exe 0 0 0 03c4 svchost.exe 0 0 0 041c Ati2evxx.exe 0 0 0 042c svchost.exe 0 0 0 047c svchost.exe 0 0 0 0490 svchost.exe 0 0 0 04d4 audiodg.exe 0 0 0 04f0 svchost.exe 0 0 0 0500 SLsvc.exe 0 0 0 0530 svchost.exe 0 0 0 05c0 svchost.exe 0 0 0 061c AvastSvc.exe 0 0 0 0690 Ati2evxx.exe 1 0 0 00c0 spoolsv.exe 0 0 0 0114 svchost.exe 0 0 0 049c taskeng.exe 1 29 23 normal C:\Windows\system32 0624 Dwm.exe 1 16 2 high C:\Windows\system32 0854 MSASCui.exe 1 147 147 normal C:\Program Files\Windows Defender 088c LWEMon.exe 1 24 14 normal C:\Program Files\Logitech\Gaming Software 0898 MOM.exe 1 10 9 normal C:\Program Files\ATI Technologies\ATI.ACE\Core-Static 08a0 jusched.exe 1 9 2 normal C:\Program Files\Common Files\Java\Java Update 08ac AvastUI.exe 1 366 66 normal C:\Program Files\Alwil Software\Avast5 08fc LeverageService.exe 0 0 0 099c svchost.exe 0 0 0 09f0 svchost.exe 0 0 0 0a30 TnglCtrl.exe 0 0 0 0aa8 ViewpointService.exe 0 0 0 0ab8 svchost.exe 0 0 0 0acc SearchIndexer.exe 0 0 0 0afc XAudio.exe 0 0 0 0bb0 SetPoint.exe 1 23 27 normal C:\Program Files\Logitech\SetPoint 0c48 WUDFHost.exe 0 0 0 0f28 KHALMNPR.EXE 1 9 18 normal C:\Program Files\Common Files\Logishrd\KHAL2 0ff8 CCC.exe 1 40 42 normal C:\Program Files\ATI Technologies\ATI.ACE\Core-Static 0de4 taskeng.exe 0 0 0 0e48 ViewMgr.exe 1 94 34 normal C:\Program Files\Viewpoint\Viewpoint Manager 0a3c mobsync.exe 1 12 7 normal C:\Windows\System32 0a00 wmpnetwk.exe 0 0 0 160c PresentationFontCache.exe 0 0 0 144c wmpnscfg.exe 1 22 11 normal C:\Program Files\Windows Media Player 107c MpCmdRun.exe 0 0 0 1500 AAWService.exe 0 0 0 0c5c unsecapp.exe 0 0 0 09ac WmiPrvSE.exe 0 0 0 1190 AAWTray.exe 1 49 15 normal C:\Program Files\Lavasoft\Ad-Aware 13ec explorer.exe 1 655 203 normal C:\Windows 1690 Armada2.exe 1 94 79 normal C:\Program Files\Activision\Star Trek Armada II Fleet Operations\data hardware: + Computer - ACPI x86-based PC + Disk drives - Generic USB CF Reader USB Device - Generic USB MS Reader USB Device - Generic USB SD Reader USB Device - Generic USB SM Reader USB Device - Hitachi HDS721616PLA380 ATA Device + Display adapters - Radeon X300/X550/X1050 Series (driver 8.593.100.0) - Radeon X300/X550/X1050 Series Secondary (driver 8.593.100.0) + DVD/CD-ROM drives - ATAPI DVD W DH16W1P ATA Device + Human Interface Devices - Logitech MOMO Racing (HID) (driver 5.4.108.0) - Logitech MOMO Racing USB (driver 5.4.108.0) - Logitech Virtual Hid Device (driver 5.4.108.0) - Logitech Virtual Hid Device (driver 5.4.108.0) + IDE ATA/ATAPI controllers - IDE Channel - IDE Channel - IDE Channel - Intel(R) 82801G (ICH7 Family) Ultra ATA Storage Controllers - 27DF - Intel(R) 82801GB/GR/GH (ICH7 Family) Serial ATA Storage Controller - 27C0 + Keyboards - HID Keyboard Device - PS/2 Keyboard (driver 4.72.24.0) + Mice and other pointing devices - HID-compliant mouse - PS/2 Compatible Mouse (driver 4.72.24.0) + Modems - PCI Soft Data Fax Modem with SmartCP (driver 7.67.0.0) + Monitors - Generic Non-PnP Monitor + Network adapters - Intel(R) PRO/100 VE Network Connection - TAP-Win32 Adapter V9 (Tunngle) (driver 9.0.0.6) + Portable Devices - USB CF Reader - USB MS Reader - USB SD Reader - USB SM Reader + Ports (COM & LPT) - Communications Port (COM1) - Printer Port (LPT1) + Processors - Intel(R) Pentium(R) 4 CPU 3.00GHz - Intel(R) Pentium(R) 4 CPU 3.00GHz + Sound, video and game controllers - High Definition Audio Device + Storage controllers - Microsoft iSCSI Initiator + Storage volume shadow copies - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy - Generic volume shadow copy + System devices - ACPI Fixed Feature Button - ACPI Sleep Button - Advanced programmable interrupt controller - Direct memory access controller - High Definition Audio Controller - High precision event timer - Intel(R) 82801 PCI Bridge - 244E - Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D0 - Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D4 - Intel(R) 82801G (ICH7 Family) PCI Express Root Port - 27D6 - Intel(R) 82801G (ICH7 Family) SMBus Controller - 27DA - Intel(R) 82801GH (ICH7DH) LPC Interface Controller - 27B0 - Intel(R) 82801GR/GH/GHM (ICH7 Family) PCI Express Root Port - 27E0 - Intel(R) 82801GR/GH/GHM (ICH7 Family) PCI Express Root Port - 27E2 - Intel(R) 945G/GZ/P/PL PCI Express Root Port - 2771 - Intel(R) 945G/GZ/P/PL Processor to I/O Controller - 2770 - Logitech Virtual Bus Enumerator (driver 5.4.108.0) - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Motherboard resources - Motherboard resources - Numeric data processor - PCI bus - Plug and Play Software Device Enumerator - Printer Port Logical Interface - Programmable interrupt controller - System CMOS/real time clock - System speaker - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - UMBus Enumerator - UMBus Enumerator - UMBus Root Bus Enumerator - Volume Manager + Universal Serial Bus controllers - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C8 - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27C9 - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CA - Intel(R) 82801G (ICH7 Family) USB Universal Host Controller - 27CB - Intel(R) 82801G (ICH7 Family) USB2 Enhanced Host Controller - 27CC - USB Mass Storage Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub cpu registers: eax = 80000000 ebx = 00000001 ecx = 0f3828dc edx = 0f246018 esi = 0b9bab08 edi = 12b09930 eip = 004e68be esp = 0012fa40 ebp = 0012fa48 stack dump: 0012fa40 01 00 00 00 3f 00 00 00 - 60 fa 12 00 a5 1f 8e 5a ....?...`......Z 0012fa50 18 60 24 0f 01 00 00 00 - 24 ab a1 5a 08 ab 9b 0b .`$.....$..Z.... 0012fa60 90 fa 12 00 d5 e0 9b 5a - 08 3c 76 00 01 00 00 00 .......Z. call dword ptr [$5a9dcf9c] ; ControlButton.State (Armada2.exe) 5a8e1f9f 5a8e1fa5 5562 pop ebx 5a8e1fa6 pop ecx 5a8e1fa7 pop ebp 5a8e1fa8 ret