date/time : 2017-10-02, 21:01:59, 720ms computer name : PRINTER user name : Victor registered owner : Victor operating system : Windows 7 Service Pack 1 build 7601 system language : Spanish system up time : 6 hours 6 minutes program up time : 45 seconds processors : 2x Intel(R) Core(TM)2 Duo CPU E6550 @ 2.33GHz physical memory : 1405/3455 MB (free/total) free disk space : (C:) 28,90 GB display mode : 1680x1050, 32 bit process id : $1184 allocated memory : 555,07 MB largest free block : 741,06 MB executable : MWIF.exe exec. date/time : 2017-08-10 15:52 version : 2.5.5.2 compiled with : Delphi XE8 madExcept version : 4.0.15 contact name : kormel contact email : segundapiedra@gmail.com callstack crc : $d5bf8d5f, $60a6966d, $60a6966d exception number : 1 exception class : EAccessViolation exception message : Access violation at address 00BFC7F4 in module 'MWIF.exe'. Read of address 7AEE228B. main thread ($f08): 00bfc7f4 +014 MWIF.exe Maps 3243 +1 TMap.GetWeatherZone 00bfbc28 +010 MWIF.exe Maps 2743 +1 TMap.GetHexWeather 00bfc621 +119 MWIF.exe Maps 3157 +36 TMap.GetWeatherHexsideTerrainSet 00c04938 +024 MWIF.exe Land 2590 +2 TLandUnit.HexsideAttackDivisor 00c0421b +00f MWIF.exe Land 2292 +1 TLandUnit.GetCurrAttackHexside 0094dc77 +24b MWIF.exe LandCombatHex 1515 +66 DoAddA 0094df35 +131 MWIF.exe LandCombatHex 1631 +72 TLandCombatHex.ComputeValues 0094e766 +406 MWIF.exe LandCombatHex 1880 +113 TLandCombatHexList.AddLAUnit 00a8b28b +04b MWIF.exe UseGRLProcs 858 +11 ParadropMade 00a1fee3 +0d3 MWIF.exe PhaseParadrop 2340 +34 DoParadrop 00a202fe +40e MWIF.exe PhaseParadrop 2526 +181 TPhaseParadrop.Process 00ac5f19 +365 MWIF.exe PhaseControlProcs 113 +84 PhaseControl 00be3458 +038 MWIF.exe GameControls 240 +13 GameControl 0094a1c3 +88f MWIF.exe CentralControls 770 +477 CentralControl 00c5301c +000 MWIF.exe Main 6876 +0 TMainForm.MainMWIFTimerTimer 0062d4a7 +00f MWIF.exe Vcl.ExtCtrls TTimer.Timer 0062d38b +02b MWIF.exe Vcl.ExtCtrls TTimer.WndProc 0053e890 +014 MWIF.exe System.Classes StdWndProc 768dcc3b +00a USER32.dll DispatchMessageW 006a83c3 +0f3 MWIF.exe Vcl.Forms TApplication.ProcessMessage 006a8406 +00a MWIF.exe Vcl.Forms TApplication.HandleMessage 006a8739 +0c9 MWIF.exe Vcl.Forms TApplication.Run 00ce14dd +049 MWIF.exe MWIF 441 +4 initialization 76e3ef8a +010 kernel32.dll BaseThreadInitThunk thread $10d8: 77c965ca +0a ntdll.dll NtWaitForMultipleObjects 76e3ef8a +10 kernel32.dll BaseThreadInitThunk thread $129c: 77c965fa +0a ntdll.dll NtWaitForWorkViaWorkerFactory 76e3ef8a +10 kernel32.dll BaseThreadInitThunk thread $f1c: 77c965fa +0a ntdll.dll NtWaitForWorkViaWorkerFactory 76e3ef8a +10 kernel32.dll BaseThreadInitThunk thread $1090: 77c965fa +0a ntdll.dll NtWaitForWorkViaWorkerFactory 76e3ef8a +10 kernel32.dll BaseThreadInitThunk thread $16d8: 77c965fa +0a ntdll.dll NtWaitForWorkViaWorkerFactory 76e3ef8a +10 kernel32.dll BaseThreadInitThunk thread $9c4: 77c965fa +0a ntdll.dll NtWaitForWorkViaWorkerFactory 76e3ef8a +10 kernel32.dll BaseThreadInitThunk modules: 00400000 MWIF.exe 2.5.5.2 C:\Matrix Games\World in Flames 54530000 tapi32.dll 6.1.7600.16385 C:\Windows\system32 5dd50000 FaultRep.dll 6.1.7601.17514 C:\Windows\system32 5dea0000 AcLayers.DLL 6.1.7601.19050 C:\Windows\AppPatch 6e6e0000 wsock32.dll 6.1.7600.16385 C:\Windows\system32 6e7a0000 msi.dll 5.0.7601.23593 C:\Windows\system32 6ea70000 GROOVEEX.DLL 15.0.4420.1017 C:\Program Files\Microsoft Office\Office15 6ec70000 ATL100.DLL 10.0.40219.325 C:\Windows\system32 6eca0000 MSVCP100.dll 10.0.40219.325 C:\Windows\system32 6ed10000 MSVCR100.dll 10.0.40219.325 C:\Windows\system32 6f090000 explorerframe.dll 6.1.7601.23893 C:\Windows\system32 6f390000 ntshrui.dll 6.1.7601.17755 C:\Windows\system32 6f400000 CSCAPI.dll 6.1.7601.17514 C:\Windows\system32 6f410000 CSCDLL.dll 6.1.7601.17514 C:\Windows\System32 6f490000 cscui.dll 6.1.7601.17514 C:\Windows\System32 6f500000 EhStorShell.dll 6.1.7600.16385 C:\Windows\system32 6f540000 ShellExtX32.dll C:\ProgramData\MEGAsync 6f600000 GrooveIntlResource.dll 15.0.4420.1017 C:\Program Files\Microsoft Office\Office15\3082 70a60000 mpr.dll 6.1.7600.16385 C:\Windows\system32 71550000 IdnDL.dll 6.1.7600.16385 C:\Windows\system32 72900000 comctl32.dll 5.82.7601.18837 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc 730a0000 Fwpuclnt.dll 6.1.7601.18283 C:\Windows\system32 735c0000 winmm.dll 6.1.7601.17514 C:\Windows\system32 73a10000 WINNSI.DLL 6.1.7601.23889 C:\Windows\system32 73a30000 iphlpapi.dll 6.1.7601.17514 C:\Windows\system32 73b90000 slc.dll 6.1.7600.16385 C:\Windows\system32 73c40000 msimg32.dll 6.1.7600.16385 C:\Windows\system32 73ea0000 oleacc.dll 7.0.0.0 C:\Windows\system32 740b0000 wkscli.dll 6.1.7601.17514 C:\Windows\system32 740c0000 netutils.dll 6.1.7601.17514 C:\Windows\system32 740d0000 netapi32.dll 6.1.7601.17887 C:\Windows\system32 741d0000 security.dll 6.1.7600.16385 C:\Windows\system32 742e0000 WindowsCodecs.dll 6.2.9200.21830 C:\Windows\system32 745a0000 DUI70.dll 6.1.7600.16385 C:\Windows\system32 74800000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32 74840000 dwmapi.dll 6.1.7601.18917 C:\Windows\system32 74870000 DUser.dll 6.1.7600.16385 C:\Windows\system32 748a0000 propsys.dll 7.0.7601.17514 C:\Windows\system32 749e0000 comctl32.dll 6.10.7601.18837 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d 74ff0000 ntmarta.dll 6.1.7600.16385 C:\Windows\system32 75080000 winspool.drv 6.1.7601.17514 C:\Windows\system32 750e0000 version.dll 6.1.7600.16385 C:\Windows\system32 750f0000 wtsapi32.dll 6.1.7601.17514 C:\Windows\system32 75670000 WINSTA.dll 6.1.7601.17514 C:\Windows\system32 75840000 srvcli.dll 6.1.7601.17514 C:\Windows\system32 759d0000 SECUR32.DLL 6.1.7601.23889 C:\Windows\system32 75a10000 SspiCli.dll 6.1.7601.23889 C:\Windows\system32 75a30000 apphelp.dll 6.1.7601.19050 C:\Windows\system32 75a80000 CRYPTBASE.dll 6.1.7601.23889 C:\Windows\system32 75b60000 profapi.dll 6.1.7600.16385 C:\Windows\system32 75b80000 KERNELBASE.dll 6.1.7601.23889 C:\Windows\system32 75bd0000 api-ms-win-downlevel-normaliz-l1-1-0.dll 6.2.9200.16492 C:\Windows\system32 75be0000 api-ms-win-downlevel-shlwapi-l1-1-0.dll 6.2.9200.16492 C:\Windows\system32 75bf0000 api-ms-win-downlevel-advapi32-l1-1-0.dll 6.2.9200.16492 C:\Windows\system32 75c10000 api-ms-win-downlevel-user32-l1-1-0.dll 6.2.9200.16492 C:\Windows\system32 75c20000 api-ms-win-downlevel-version-l1-1-0.dll 6.2.9200.16492 C:\Windows\system32 75df0000 CFGMGR32.dll 6.1.7601.17514 C:\Windows\system32 75e20000 DEVOBJ.dll 6.1.7600.16385 C:\Windows\system32 75e70000 USERENV.dll 6.1.7601.17514 C:\Windows\system32 75e90000 LPK.dll 6.1.7601.23807 C:\Windows\system32 75ea0000 SETUPAPI.dll 6.1.7601.17514 C:\Windows\system32 76050000 GDI32.dll 6.1.7601.23807 C:\Windows\system32 760a0000 sechost.dll 6.1.7601.18869 C:\Windows\SYSTEM32 76210000 MSCTF.dll 6.1.7601.23572 C:\Windows\system32 762e0000 RPCRT4.dll 6.1.7601.23889 C:\Windows\system32 76390000 msvcrt.dll 7.0.7601.17744 C:\Windows\system32 76440000 oleaut32.dll 6.1.7601.23775 C:\Windows\system32 764e0000 USP10.dll 1.626.7601.23894 C:\Windows\system32 76580000 CLBCatQ.DLL 2001.12.8530.16385 C:\Windows\system32 76610000 wininet.dll 11.0.9600.18792 C:\Windows\system32 768c0000 USER32.dll 6.1.7601.23594 C:\Windows\system32 76990000 ole32.dll 6.1.7601.23889 C:\Windows\system32 76af0000 SHLWAPI.dll 6.1.7601.17514 C:\Windows\system32 76b50000 iertutil.dll 11.0.9600.18792 C:\Windows\system32 76df0000 kernel32.dll 6.1.7601.23889 C:\Windows\system32 76ed0000 advapi32.dll 6.1.7601.23889 C:\Windows\system32 76f80000 comdlg32.dll 6.1.7601.17514 C:\Windows\system32 77000000 shell32.dll 6.1.7601.23893 C:\Windows\system32 77c50000 ntdll.dll 6.1.7601.23889 C:\Windows\SYSTEM32 77da0000 NSI.dll 6.1.7601.23889 C:\Windows\system32 77db0000 WS2_32.dll 6.1.7601.23451 C:\Windows\system32 77df0000 WLDAP32.dll 6.1.7601.23889 C:\Windows\system32 77e70000 normaliz.DLL 6.1.7600.16385 C:\Windows\system32 77e80000 IMM32.DLL 6.1.7601.17514 C:\Windows\system32 processes: 0000 Idle 0 0 0 0004 System 0 0 0 0104 smss.exe 0 0 0 0164 csrss.exe 0 0 0 01a8 csrss.exe 1 0 0 01b0 wininit.exe 0 0 0 01dc services.exe 0 0 0 01ec lsass.exe 0 0 0 01f4 lsm.exe 0 0 0 0218 winlogon.exe 1 0 0 0290 svchost.exe 0 0 0 02dc nvvsvc.exe 0 0 0 02f4 nvSCPAPISvr.exe 0 0 0 0320 svchost.exe 0 0 0 0374 svchost.exe 0 0 0 03c0 svchost.exe 0 0 0 03dc svchost.exe 0 0 0 03fc svchost.exe 0 0 0 0478 svchost.exe 0 0 0 04fc svchost.exe 0 0 0 0504 nvxdsync.exe 1 0 0 050c nvvsvc.exe 1 0 0 061c spoolsv.exe 0 0 0 0678 sched.exe 0 0 0 0688 taskhost.exe 1 45 30 normal C:\Windows\system32 06b8 Dwm.exe 1 17 2 normal C:\Windows\system32 06e4 Explorer.EXE 1 460 262 normal C:\Windows 0708 svchost.exe 0 0 0 07d8 avgnt.exe 1 78 51 normal C:\Program Files\Avira\AntiVir Desktop 07e4 mylbx.exe 1 170 66 normal C:\Program Files\My Lockbox 07f8 NvBackend.exe 1 9 4 normal C:\Program Files\NVIDIA Corporation\Update Core 0128 jusched.exe 1 9 2 normal C:\Program Files\Common Files\Java\Java Update 04c8 SASCore.exe 0 0 0 0654 armsvc.exe 0 0 0 06e0 avguard.exe 0 0 0 0588 svchost.exe 0 0 0 0430 svchost.exe 0 0 0 080c NvNetworkService.exe 0 0 0 086c NvStreamService.exe 0 0 0 08bc RichVideo.exe 0 0 0 08e4 svchost.exe 0 0 0 08f0 nvtray.exe 1 66 4 normal C:\Program Files\NVIDIA Corporation\Display 0930 Avira.ServiceHost.exe 0 0 0 0b40 avshadow.exe 0 0 0 0d50 NvStreamNetworkService.exe 0 0 0 0f00 NvStreamUserAgent.exe 1 0 0 0f20 conhost.exe 1 0 0 0c68 Avira.Systray.exe 1 40 51 normal C:\Program Files\Avira\Launcher 0734 Telegram.exe 1 88 85 normal C:\Users\Victor\AppData\Roaming\Telegram Desktop 00e8 sppsvc.exe 0 0 0 0a7c svchost.exe 0 0 0 1758 OSPPSVC.EXE 0 0 0 07c8 firefox.exe 1 100 81 normal C:\Program Files\Mozilla Firefox 1660 taskhost.exe 1 0 0 0a48 WmiPrvSE.exe 0 0 0 0a40 audiodg.exe 0 0 0 124c autorun.exe 1 91 68 normal C:\Matrix Games\World in Flames 1184 MWIF.exe 1 1169 222 normal C:\Matrix Games\World in Flames 1084 svchost.exe 0 0 0 hardware: + Computer - Equipo basado en ACPI x86 + Disk drives - KINGSTON SV300S37A120G ATA Device - WDC WD10EZRX-00D8PB0 ATA Device + Display adapters - NVIDIA GeForce 9500 GT (driver 9.18.13.4195) + DVD/CD-ROM drives - PIONEER DVD-RW DVR-115D ATA Device + Human Interface Devices - Dispositivo compatible con HID - Dispositivo de control del consumidor compatible con HID - Dispositivo de entrada USB - Dispositivo de entrada USB + IDE ATA/ATAPI controllers - ATA Channel 0 - ATA Channel 0 - ATA Channel 1 - ATA Channel 1 - Controladora de almacenamiento ATA serie Intel(R) 82801GB/GR/GH (familia ICH7) - 27C0 - Controladoras de almacenamiento Ultra ATA Intel(R) 82801G (familia ICH7) - 27DF + Keyboards - Dispositivo de teclado HID - Teclado PS/2 estándar + Mice and other pointing devices - Mouse compatible con HID - Mouse PS/2 de Microsoft + Monitors - Monitor PnP genérico + Network adapters - Adaptador de minipuerto WiFi virtual de Microsoft - Adaptador ISATAP de Microsoft - Controladora Atheros L2 Fast Ethernet 10/100/1000Base-T - D-Link DWA-547 RangeBooster N650 Desktop Adapter (driver 8.0.0.238) - Minipuerto WAN (IP) - Minipuerto WAN (IPv6) - Minipuerto WAN (L2TP) - Minipuerto WAN (Monitor de red) - Minipuerto WAN (PPPOE) - Minipuerto WAN (PPTP) - Minipuerto WAN (SSTP) - Teredo Tunneling Pseudo-Interface - WAN Miniport (IKEv2) + Ports (COM & LPT) - Puerto de comunicaciones (COM1) - Puerto de impresora ECP (LPT1) + Processors - Intel(R) Core(TM)2 Duo CPU E6550 @ 2.33GHz - Intel(R) Core(TM)2 Duo CPU E6550 @ 2.33GHz + Sound, video and game controllers - Dispositivo de High Definition Audio - NVIDIA Virtual Audio Device (Wave Extensible) (WDM) (driver 1.2.40.0) + Storage volume shadow copies - Instantánea de volumen genérico - Instantánea de volumen genérico - Instantánea de volumen genérico - Instantánea de volumen genérico - Instantánea de volumen genérico - Instantánea de volumen genérico + System devices - Administrador de volúmenes - Altavoz del sistema - Archivar como controlador de volumen - ATK0110 ACPI UTILITY (driver 1043.2.15.37) - Botón de característica fija ACPI - Botón de encendido ACPI - Bus PCI - Controlador BIOS de Microsoft System Management - Controlador de enumerador de unidades virtuales de Microsoft - Controlador de mouse de Terminal Server - Controlador de teclado de Terminal Server - Controladora de acceso directo a memoria - Controladora de High Definition Audio - Controladora de interfaz LPC de Intel(R) 82801GB/GR (familia ICH7) - 27B8 - Controladora de procesador Intel(R) 945G/GZ/GC/P/PL a E/S - 2770 - Controladora programable de interrupciones - Controladora SMBus de Intel(R) 82801G (familia ICH7) - 27DA - Cronómetro del sistema - Dispositivo concentrador de firmware Intel(R) 82802 - Enumerador de bus compuesto - Enumerador de bus raíz de UMBus - Enumerador de dispositivos de software Plug and Play - Enumerador de UMBus - Interfaz lógica de puerto de impresora - Procesador de datos numéricos - Puente PCI Intel(R) 82801 - 244E - Puerto raíz PCI Express de Intel(R) 82801G (familia ICH7) - 27D0 - Puerto raíz PCI Express de Intel(R) 82801G (familia ICH7) - 27D2 - Puerto raíz PCI Express de Intel(R) 945G/GZ/GC/P/PL - 2771 - Recursos de la placa base - Recursos de la placa base - Recursos de la placa base - Recursos de la placa base - Recursos de la placa base - Remote Desktop Device Redirector Bus - Sistema CMOS/reloj en tiempo real - Sistema Microsoft compatible con ACPI - Tarjeta de sistema - Tarjeta de sistema - Temporizador de eventos de alta precisión + Universal Serial Bus controllers - Concentrador raíz USB - Concentrador raíz USB - Concentrador raíz USB - Concentrador raíz USB - Concentrador raíz USB - Controlador de host mejorado USB2 Intel(R) 82801G (familia ICH7) - 27CC - Controlador de host universal USB Intel(R) 82801G (familia ICH7) - 27C8 - Controlador de host universal USB Intel(R) 82801G (familia ICH7) - 27C9 - Controlador de host universal USB Intel(R) 82801G (familia ICH7) - 27CA - Controlador de host universal USB Intel(R) 82801G (familia ICH7) - 27CB - Dispositivo compuesto USB cpu registers: eax = 7aee228b ebx = 039b3390 ecx = fb06227b edx = 7aee228b esi = 000000bf edi = ffffba51 eip = 00bfc7f4 esp = 0012f7f8 ebp = 039b3390 stack dump: 0012f7f8 51 ba ff ff bf 00 00 00 - 90 33 9b 03 2d bc bf 00 Q........3..-... 0012f808 38 f8 12 00 43 00 00 00 - 25 00 00 00 90 33 9b 03 8...C...%....3.. 0012f818 26 c6 bf 00 78 c2 eb 1c - 78 c2 eb 1c 1d 00 00 00 &...x...x....... 0012f828 77 b4 bf 00 51 ba 00 00 - 43 00 00 00 25 00 00 00 w...Q...C...%... 0012f838 d4 f8 12 00 3d 49 c0 00 - 1d 00 00 00 25 00 43 00 ....=I......%.C. 0012f848 01 66 78 00 c9 00 00 00 - 00 f9 12 00 78 c2 eb 1c .fx.........x... 0012f858 78 c2 eb 1c 20 42 c0 00 - 25 00 43 00 00 f9 12 00 x... B..%.C..... 0012f868 c9 00 00 00 c9 00 00 00 - c9 00 00 00 78 c2 eb 1c ............x... 0012f878 5f 0c cc 00 78 c2 eb 1c - 78 c2 eb 1c 78 c2 eb 1c _...x...x...x... 0012f888 7c dc 94 00 00 f9 12 00 - 02 00 00 00 10 31 be 1d |............1.. 0012f898 bf 0d c8 00 94 56 78 00 - 6f 66 78 00 c9 00 00 00 .....Vx.ofx..... 0012f8a8 94 56 78 00 6f 66 78 00 - 02 00 00 00 90 e2 ba 1d .Vx.ofx......... 0012f8b8 c2 6f c0 00 30 f9 12 00 - 25 00 43 00 d4 f8 12 00 .o..0...%.C..... 0012f8c8 00 f9 12 00 02 00 00 00 - 10 31 be 1d 28 f9 12 00 .........1..(... 0012f8d8 3a df 94 00 28 f9 12 00 - c0 9d e5 06 60 f9 12 00 :...(.......`... 0012f8e8 01 3c b9 1d bf 0d c8 00 - 80 c4 eb 1c 6f 66 78 00 .<..........ofx. 0012f8f8 78 c2 eb 1c 00 00 00 00 - 70 3f 1e 06 30 f9 12 00 x.......p?..0... 0012f908 cc 0d c8 00 20 f9 12 00 - c0 9d e5 06 60 f9 12 00 .... .......`... 0012f918 c9 00 00 00 c0 9d e5 06 - 78 c2 eb 1c 5f 0c cc 00 ........x..._... 0012f928 64 f9 12 00 6b e7 94 00 - 78 f9 12 00 9c a4 40 00 d...k...x.....@. disassembling: [...] 00bfc7e7 mov ebx, eax 00bfc7e9 3243 mov ecx, edi 00bfc7eb mov edx, esi 00bfc7ed mov eax, ebx 00bfc7ef call -$1390 ($bfb464) ; Maps.TMap.GetHexData 00bfc7f4 > movzx eax, word ptr [eax] 00bfc7f7 xor ecx, ecx 00bfc7f9 mov dx, 7 00bfc7fd call -$46b106 ($7916fc) ; MWIFUtil.GetWordValue 00bfc802 3245 pop edi 00bfc803 pop esi [...] error details: invasion a para attack over the same hex