Interact with AutoIt ...

[Dalord Urgod]

Hi
I have been trying to reproduce the inject function in to AutoIt.
From what I have read here some of you know Atuit so maybe you can help
It crashed the client at "CreateRemoteThread" (see attached code and crash report)
Please note that I am an amateur programmer (I do it for fun but have no formal training)
But this is not cut and paste stuff it is an attempt at converting a C++ routine in to AutoIt function
I can smell the flint stone already but hopefully my asbestos junk guard will survive long enough to get me some useful info.

My Func:

	While $splash = 0
$splash = Floor(_MemoryRead($Bobber + 216, $WoWProcess, "int"))
$interact = _MemoryRead(_MemoryRead($Bobber + (36 * 4), $WoWProcess, 'uint'), $WoWProcess, 'uint')
$S_Bobber = $Bobber
$s_curMgrPointer = $scurmgr
If $splash = 1 Then
$hProcess = _GetProcHandle($PID)
$lpCodeCave = _MemVirtualAllocEx($hProcess, $Null, 0x1000, $MEM_COMMIT, $PAGE_EXECUTE_READWRITE);
;Dim $bInject[6] = [0xB8, 0x01, 0x00, 0x00, 0x00, 0xC3]
Dim $bInject[31] = [0x8B, 0x15, 0xEF, 0xBE, 0xAD, 0xDE, 0x64, 0xA1, 0x2C, 0x00, 0x00, 0x00, 0x8B, 0x00, 0x83, 0xC0, 0x10, 0x89, 0x10, 0x8B, 0x0D, 0xEF, 0xBE, 0xAD, 0xDE, 0xE8, 0, 0, 0, 0, 0xC3];
_MemoryWrite($lpCodeCave, $WoWProcess, $bInject, 'byte[5]')
If @error <> 0 Then MsgBox(0, "Error", " Error #: " & @error)
_MemoryWrite($lpCodeCave + 2, $WoWProcess, $s_curMgrPointer)
If @error <> 0 Then MsgBox(0, "Error", " Error #: " & @error)
_MemoryWrite($lpCodeCave + 21, $WoWProcess, $lpCodeCave + 0x100)
If @error <> 0 Then MsgBox(0, "Error", " Error #: " & @error)
_MemoryWrite($lpCodeCave + 26, $WoWProcess, $interact - ($lpCodeCave + 30))
If @error <> 0 Then MsgBox(0, "Error", " Error #: " & @error)
_MemoryWrite($lpCodeCave + 0x100, $WoWProcess, $S_Bobber)
If @error <> 0 Then MsgBox(0, "Error", " Error #: " & @error)
        ;<<<<---------- CRASHES WOW HERE ---------->>>>
$hThread = CreateRemoteThread($hProcess,$Null,0,$lpCodeCave,0,0,$Null)
_WinAPI_WaitForSingleObject($hThread, -1)
_WinAPI_CloseHandle($hThread)
_MemVirtualFreeEx($hProcess, $lpCodeCave, 0x1000, $MEM_DECOMMIT)
EndIf


                        
 Func CreateRemoteThread($hProcess, $lpThreadAttributes, $dwStackSize, $lpStartAddress, $lpParameter, $dwCreationFlags, $lpThreadId)
Local $Return
$Return = DllCall("kernel32.dll", "int", "CreateRemoteThread", "int", $hProcess, "ptr", $lpThreadAttributes, "int", $dwStackSize, "int", $lpStartAddress, "ptr", $lpParameter, "int", $dwCreationFlags, "int", $lpThreadId)
 Return $Return[0]
 EndFunc   ;==>CreateRemoteThread

Crash log:

==============================================================================
World of WarCraft (build 9551)

Exe:     WoW.exe
Time:     Apr  8, 2009  1:10:47.671 AM
User:     
Computer: 
------------------------------------------------------------------------------

This application has encountered a critical error:

ERROR #132 (0x85100084) Fatal Exception
Program:	C:\Users\Public\Games\World of Warcraft\WoW.exe
Exception:	0xC0000005 (ACCESS_VIOLATION) at 001B:0D090000

The instruction at "0x0D090000" referenced memory at "0x771348FF".
The memory could not be "written".


WoWBuild: 9551
Settings: 
SET locale "enUS"
SET portal "us"
SET realmList "us.logon.worldofwarcraft.com"
SET patchlist "us.version.worldofwarcraft.com"
SET coresDetected "4"
SET processAffinityMask "3"
SET hwDetect "0"
SET gxWindow "1"
SET gxColorBits "24"
SET gxDepthBits "24"
SET gxResolution "1680x1050"
SET gxRefresh "60"
SET gxMultisampleQuality "0.000000"
SET gxFixLag "0"
SET videoOptionsVersion "1"
SET movie "0"
SET mouseSpeed "1"
SET Gamma "1.000000"
SET readTOS "1"
SET readEULA "1"
SET showToolsUI "1"
SET Sound_VoiceChatInputDriverName "System Default"
SET Sound_VoiceChatOutputDriverName "System Default"
SET Sound_OutputDriverName "System Default"
SET ChatMusicVolume "0.29999998211861"
SET ChatSoundVolume "0.39999997615814"
SET ChatAmbienceVolume "0.29999998211861"
SET Sound_MusicVolume "0.40000000596046"
SET Sound_AmbienceVolume "0.60000002384186"
SET farclip "507"
SET specular "1"
SET particleDensity "1.000000"
SET groundEffectDensity "24"
SET realmName "Area 52"
SET gameTip "62"
SET VoiceActivationSensitivity "0.39999997615814"
SET readScanning "-1"
SET readContest "-1"
SET readTerminationWithoutNotice "-1"
SET installType "Retail"
SET gxMultisample "4"
SET groundEffectDist "70"
SET environmentDetail "0.75"
SET extShadowQuality "1"
SET Sound_EnableMusic "0"
SET Sound_EnableSoundWhenGameIsInBG "1"
SET spellEffectLevel "6"
SET baseMip "1"
SET weatherDensity "1"
SET checkAddonVersion "0"
SET gxTripleBuffer "1"
SET lastCharacterIndex "1"
------------------------------------------------------------------------------

----------------------------------------
    x86 Registers
----------------------------------------

EAX=771348FF  EBX=00000000  ECX=00000000  EDX=0D090000  ESI=00000000
EDI=00000000  EBP=2B0CFF94  ESP=2B0CFF8C  EIP=0D090000  FLG=00010246
CS =001B      DS =0023      ES =0023      SS =0023      FS =003B      GS =0000


----------------------------------------
    Stack Trace (Manual)
----------------------------------------

Address  Frame    Logical addr  Module

Showing 36/36 threads...

--- Thread ID: 5688 ---
7713C1B2 0019FE60 0001:0004B1B2 C:\Windows\system32\kernel32.dll
006AB710 0019FE70 0001:002AA710 C:\Users\Public\Games\World of Warcraft\WoW.exe
00426279 0019FED4 0001:00025279 C:\Users\Public\Games\World of Warcraft\WoW.exe
00426481 0019FEEC 0001:00025481 C:\Users\Public\Games\World of Warcraft\WoW.exe
00406958 0019FF88 0001:00005958 C:\Users\Public\Games\World of Warcraft\WoW.exe
77134911 0019FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 0019FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 0019FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 6248 ---
7713C1B2 0376FF18 0001:0004B1B2 C:\Windows\system32\kernel32.dll
006BB325 0376FF34 0001:002BA325 C:\Users\Public\Games\World of Warcraft\WoW.exe
006D56D5 0376FF48 0001:002D46D5 C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDBCF 0376FF80 0001:003ECBCF C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDC74 0376FF94 0001:003ECC74 C:\Users\Public\Games\World of Warcraft\WoW.exe
77DCE4B6 0376FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 0376FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 6072 ---
7713C1B2 038DFF18 0001:0004B1B2 C:\Windows\system32\kernel32.dll
006BB325 038DFF34 0001:002BA325 C:\Users\Public\Games\World of Warcraft\WoW.exe
006D56D5 038DFF48 0001:002D46D5 C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDBCF 038DFF80 0001:003ECBCF C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDC74 038DFF94 0001:003ECC74 C:\Users\Public\Games\World of Warcraft\WoW.exe
77DCE4B6 038DFFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 038DFFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 2364 ---
7713C1B2 03A4FF18 0001:0004B1B2 C:\Windows\system32\kernel32.dll
006BB325 03A4FF34 0001:002BA325 C:\Users\Public\Games\World of Warcraft\WoW.exe
006D56D5 03A4FF48 0001:002D46D5 C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDBCF 03A4FF80 0001:003ECBCF C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDC74 03A4FF94 0001:003ECC74 C:\Users\Public\Games\World of Warcraft\WoW.exe
77DCE4B6 03A4FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 03A4FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 7048 ---
7713C1B2 07FFFF64 0001:0004B1B2 C:\Windows\system32\kernel32.dll
72953DD0 07FFFF80 0001:00012DD0 C:\Windows\system32\d3d9.dll
7295EBCE 07FFFF88 0001:0001DBCE C:\Windows\system32\d3d9.dll
77134911 07FFFF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 07FFFFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 07FFFFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 4612 ---
770F1C7A 0816FF20 0001:00000C7A C:\Windows\system32\kernel32.dll
006BD254 0816FF48 0001:002BC254 C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDBCF 0816FF80 0001:003ECBCF C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDC74 0816FF94 0001:003ECC74 C:\Users\Public\Games\World of Warcraft\WoW.exe
77DCE4B6 0816FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 0816FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 6116 ---
770F1C7A 082DFB40 0001:00000C7A C:\Windows\system32\kernel32.dll
007CB33D 082DFB4C 0001:003CA33D C:\Users\Public\Games\World of Warcraft\WoW.exe
004555FE 082DFF6C 0001:000545FE C:\Users\Public\Games\World of Warcraft\WoW.exe
006A79A7 082DFF88 0001:002A69A7 C:\Users\Public\Games\World of Warcraft\WoW.exe
77134911 082DFF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 082DFFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 082DFFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 6724 ---
7713C1B2 089AFF44 0001:0004B1B2 C:\Windows\system32\kernel32.dll
006AB710 089AFF54 0001:002AA710 C:\Users\Public\Games\World of Warcraft\WoW.exe
00780C82 089AFF6C 0001:0037FC82 C:\Users\Public\Games\World of Warcraft\WoW.exe
006A79A7 089AFF88 0001:002A69A7 C:\Users\Public\Games\World of Warcraft\WoW.exe
77134911 089AFF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 089AFFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 089AFFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 6576 ---
77134911 0C24FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 0C24FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 0C24FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 2512 ---
770F1C7A 0C3BFF68 0001:00000C7A C:\Windows\system32\kernel32.dll
00837CB4 0C3BFF74 0001:00436CB4 C:\Users\Public\Games\World of Warcraft\WoW.exe
0083BDC9 0C3BFF88 0001:0043ADC9 C:\Users\Public\Games\World of Warcraft\WoW.exe
77134911 0C3BFF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 0C3BFFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 0C3BFFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 5720 ---
770F1C7A 0C52FF68 0001:00000C7A C:\Windows\system32\kernel32.dll
00837CB4 0C52FF74 0001:00436CB4 C:\Users\Public\Games\World of Warcraft\WoW.exe
0083BDC9 0C52FF88 0001:0043ADC9 C:\Users\Public\Games\World of Warcraft\WoW.exe
77134911 0C52FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 0C52FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 0C52FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 4172 ---
7713C1B2 0C69FF38 0001:0004B1B2 C:\Windows\system32\kernel32.dll
006AB710 0C69FF48 0001:002AA710 C:\Users\Public\Games\World of Warcraft\WoW.exe
00421B85 0C69FF60 0001:00020B85 C:\Users\Public\Games\World of Warcraft\WoW.exe
00421CA1 0C69FF6C 0001:00020CA1 C:\Users\Public\Games\World of Warcraft\WoW.exe
006A79A7 0C69FF88 0001:002A69A7 C:\Users\Public\Games\World of Warcraft\WoW.exe
77134911 0C69FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 0C69FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 0C69FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 7692 ---
7713C64E 0C80FD08 0001:0004B64E C:\Windows\system32\kernel32.dll
004223FB 0C80FF60 0001:000213FB C:\Users\Public\Games\World of Warcraft\WoW.exe
00421CBE 0C80FF6C 0001:00020CBE C:\Users\Public\Games\World of Warcraft\WoW.exe
006A79A7 0C80FF88 0001:002A69A7 C:\Users\Public\Games\World of Warcraft\WoW.exe
77134911 0C80FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 0C80FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 0C80FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 4112 ---
77F00208 0C97FEE8 0001:0001F208 C:\Windows\system32\USER32.dll
77EF9B58 0C97FF04 0001:00018B58 C:\Windows\system32\USER32.dll
006D6E17 0C97FF34 0001:002D5E17 C:\Users\Public\Games\World of Warcraft\WoW.exe
006D56D5 0C97FF48 0001:002D46D5 C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDBCF 0C97FF80 0001:003ECBCF C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDC74 0C97FF94 0001:003ECC74 C:\Users\Public\Games\World of Warcraft\WoW.exe
77DCE4B6 0C97FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 0C97FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 3008 ---
7713C1B2 0CAEFF34 0001:0004B1B2 C:\Windows\system32\kernel32.dll
05AD50FD 0CAEFF54 0001:002540FD C:\Windows\system32\nvd3dum.dll
05BB22EE 0CAEFF88 0001:003312EE C:\Windows\system32\nvd3dum.dll
77134911 0CAEFF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 0CAEFFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 0CAEFFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 6088 ---
7713C1B2 0CC5FF34 0001:0004B1B2 C:\Windows\system32\kernel32.dll
05AD50FD 0CC5FF54 0001:002540FD C:\Windows\system32\nvd3dum.dll
05BB22EE 0CC5FF88 0001:003312EE C:\Windows\system32\nvd3dum.dll
77134911 0CC5FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 0CC5FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 0CC5FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 6348 ---
7713C1B2 0CDCFF34 0001:0004B1B2 C:\Windows\system32\kernel32.dll
05AD50FD 0CDCFF54 0001:002540FD C:\Windows\system32\nvd3dum.dll
05BB22EE 0CDCFF88 0001:003312EE C:\Windows\system32\nvd3dum.dll
77134911 0CDCFF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 0CDCFFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 0CDCFFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 7148 ---
7713C1B2 0CF3FF34 0001:0004B1B2 C:\Windows\system32\kernel32.dll
05AD50FD 0CF3FF54 0001:002540FD C:\Windows\system32\nvd3dum.dll
05BB22EE 0CF3FF88 0001:003312EE C:\Windows\system32\nvd3dum.dll
77134911 0CF3FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 0CF3FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 0CF3FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 7828 ---
75BC1FC8 1159FBA8 0001:00000FC8 C:\Windows\system32\mswsock.dll
76E71693 1159FC28 0001:00000693 C:\Windows\system32\WS2_32.dll
766E4A65 1159FF80 0001:00003A65 C:\Windows\system32\WININET.dll
76702DA0 1159FF88 0001:00021DA0 C:\Windows\system32\WININET.dll
77134911 1159FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 1159FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 1159FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 6496 ---
7713C1B2 11A8FF48 0001:0004B1B2 C:\Windows\system32\kernel32.dll
0086D915 11A8FF64 0001:0046C915 C:\Users\Public\Games\World of Warcraft\WoW.exe
00837DF9 11A8FF74 0001:00436DF9 C:\Users\Public\Games\World of Warcraft\WoW.exe
0083BD94 11A8FF88 0001:0043AD94 C:\Users\Public\Games\World of Warcraft\WoW.exe
77134911 11A8FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 11A8FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 11A8FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 3344 ---
77F00208 11CFFEE8 0001:0001F208 C:\Windows\system32\USER32.dll
77EF9B58 11CFFF04 0001:00018B58 C:\Windows\system32\USER32.dll
006D6E17 11CFFF34 0001:002D5E17 C:\Users\Public\Games\World of Warcraft\WoW.exe
006D56D5 11CFFF48 0001:002D46D5 C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDBCF 11CFFF80 0001:003ECBCF C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDC74 11CFFF94 0001:003ECC74 C:\Users\Public\Games\World of Warcraft\WoW.exe
77DCE4B6 11CFFFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 11CFFFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 4224 ---
76956FF0 1237FEDC 0001:00045FF0 C:\Windows\system32\RPCRT4.dll
76957090 1237FF4C 0001:00046090 C:\Windows\system32\RPCRT4.dll
76954F40 1237FF54 0001:00043F40 C:\Windows\system32\RPCRT4.dll
76954F07 1237FF7C 0001:00043F07 C:\Windows\system32\RPCRT4.dll
76954F6C 1237FF88 0001:00043F6C C:\Windows\system32\RPCRT4.dll
77134911 1237FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 1237FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 1237FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 4072 ---
7713C1B2 124EFF48 0001:0004B1B2 C:\Windows\system32\kernel32.dll
0086D915 124EFF64 0001:0046C915 C:\Users\Public\Games\World of Warcraft\WoW.exe
00837DF9 124EFF74 0001:00436DF9 C:\Users\Public\Games\World of Warcraft\WoW.exe
0083BD94 124EFF88 0001:0043AD94 C:\Users\Public\Games\World of Warcraft\WoW.exe
77134911 124EFF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 124EFFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 124EFFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 7640 ---
77134911 1265FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 1265FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 1265FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 404 ---
7713C64E 13C7FF58 0001:0004B64E C:\Windows\system32\kernel32.dll
71891883 13C7FF88 0001:00000883 C:\Windows\system32\msiltcfg.dll
77134911 13C7FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 13C7FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 13C7FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 6584 ---
77F00208 13DEFEE8 0001:0001F208 C:\Windows\system32\USER32.dll
77EF9B58 13DEFF04 0001:00018B58 C:\Windows\system32\USER32.dll
006D6E17 13DEFF34 0001:002D5E17 C:\Users\Public\Games\World of Warcraft\WoW.exe
006D56D5 13DEFF48 0001:002D46D5 C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDBCF 13DEFF80 0001:003ECBCF C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDC74 13DEFF94 0001:003ECC74 C:\Users\Public\Games\World of Warcraft\WoW.exe
77DCE4B6 13DEFFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 13DEFFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 5324 ---
7713C1B2 1576FF34 0001:0004B1B2 C:\Windows\system32\kernel32.dll
05AD50FD 1576FF54 0001:002540FD C:\Windows\system32\nvd3dum.dll
05BB22EE 1576FF88 0001:003312EE C:\Windows\system32\nvd3dum.dll
77134911 1576FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 1576FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 1576FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 2068 ---
7713C1B2 158DFF34 0001:0004B1B2 C:\Windows\system32\kernel32.dll
05AD50FD 158DFF54 0001:002540FD C:\Windows\system32\nvd3dum.dll
05BB22EE 158DFF88 0001:003312EE C:\Windows\system32\nvd3dum.dll
77134911 158DFF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 158DFFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 158DFFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 6016 ---
7713C1B2 15A4FF34 0001:0004B1B2 C:\Windows\system32\kernel32.dll
05AD50FD 15A4FF54 0001:002540FD C:\Windows\system32\nvd3dum.dll
05BB22EE 15A4FF88 0001:003312EE C:\Windows\system32\nvd3dum.dll
77134911 15A4FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 15A4FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 15A4FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 7580 ---
7713C1B2 15BBFF34 0001:0004B1B2 C:\Windows\system32\kernel32.dll
05AD50FD 15BBFF54 0001:002540FD C:\Windows\system32\nvd3dum.dll
05BB22EE 15BBFF88 0001:003312EE C:\Windows\system32\nvd3dum.dll
77134911 15BBFF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 15BBFFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 15BBFFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 7204 ---
77134911 15D2FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 15D2FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 15D2FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 4144 ---
7713C1B2 1170FF4C 0001:0004B1B2 C:\Windows\system32\kernel32.dll
006AB710 1170FF5C 0001:002AA710 C:\Users\Public\Games\World of Warcraft\WoW.exe
00826776 1170FF6C 0001:00425776 C:\Users\Public\Games\World of Warcraft\WoW.exe
006A79A7 1170FF88 0001:002A69A7 C:\Users\Public\Games\World of Warcraft\WoW.exe
77134911 1170FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 1170FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 1170FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 5296 ---
77F00208 11E6FEE8 0001:0001F208 C:\Windows\system32\USER32.dll
77EF9B58 11E6FF04 0001:00018B58 C:\Windows\system32\USER32.dll
006D6E17 11E6FF34 0001:002D5E17 C:\Users\Public\Games\World of Warcraft\WoW.exe
006D56D5 11E6FF48 0001:002D46D5 C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDBCF 11E6FF80 0001:003ECBCF C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDC74 11E6FF94 0001:003ECC74 C:\Users\Public\Games\World of Warcraft\WoW.exe
77DCE4B6 11E6FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 11E6FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 7968 ---
770F1C7A 07E1FF68 0001:00000C7A C:\Windows\system32\kernel32.dll
00837CB4 07E1FF74 0001:00436CB4 C:\Users\Public\Games\World of Warcraft\WoW.exe
0083BDC9 07E1FF88 0001:0043ADC9 C:\Users\Public\Games\World of Warcraft\WoW.exe
77134911 07E1FF94 0001:00043911 C:\Windows\system32\kernel32.dll
77DCE4B6 07E1FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 07E1FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 6212 ---
77F00208 2AF5FEE8 0001:0001F208 C:\Windows\system32\USER32.dll
77EF9B58 2AF5FF04 0001:00018B58 C:\Windows\system32\USER32.dll
006D6E17 2AF5FF34 0001:002D5E17 C:\Users\Public\Games\World of Warcraft\WoW.exe
006D56D5 2AF5FF48 0001:002D46D5 C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDBCF 2AF5FF80 0001:003ECBCF C:\Users\Public\Games\World of Warcraft\WoW.exe
007EDC74 2AF5FF94 0001:003ECC74 C:\Users\Public\Games\World of Warcraft\WoW.exe
77DCE4B6 2AF5FFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 2AF5FFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

--- Thread ID: 1912 [Current Thread] ---
0D090000 2B0CFF94 0000:00000000 <unknown>
77DCE4B6 2B0CFFD4 0001:0003D4B6 C:\Windows\system32\ntdll.dll
77DCE489 2B0CFFEC 0001:0003D489 C:\Windows\system32\ntdll.dll

----------------------------------------
    Stack Trace (Using DBGHELP.DLL)
----------------------------------------

Showing 36/36 threads...

--- Thread ID: 5688 ---
7713C1B2 kernel32.dll WaitForSingleObject+18 (0x000021E0,0x00000001,0x0019FED4,0x00426279)
006AB710 WoW.exe      <unknown symbol>+0 (0x00000001,0x00001771,0x00000002,0x00000001)
00426279 WoW.exe      <unknown symbol>+0 (0x00000000,0x004068E0,0x00000001,0x00000001)
00426481 WoW.exe      <unknown symbol>+0 (0x0040ABB9,0x00400000,0x00000000,0x00241DC2)
00406958 WoW.exe      <unknown symbol>+0 (0x7FFD3000,0x0019FFD4,0x77DCE4B6,0x7FFD3000)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x7FFD3000,0x7D5EFA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x00401000,0x7FFD3000,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x00401000,0x7FFD3000,0x00000000,0x78746341)

--- Thread ID: 6248 ---
7713C1B2 kernel32.dll WaitForSingleObject+18 (0x000021B0,0xFFFFFFFF,0x02EE2830,0x00000000)
006BB325 WoW.exe      <unknown symbol>+0 (0x02E5E1C0,0x00000000,0x02EE2830,0x0376FF80)
006D56D5 WoW.exe      <unknown symbol>+0 (0x01E5FDC8,0x51717E27,0x00000000,0x02EE2830)
007EDBCF WoW.exe      <unknown symbol>+0 (0x00000000,0x77134911,0x02EE2830,0x0376FFD4)
007EDC74 WoW.exe      <unknown symbol>+0 (0x02EE2830,0x7E31FA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x007EDBF5,0x02EE2830,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x007EDBF5,0x02EE2830,0x00000000,0x00000000)

--- Thread ID: 6072 ---
7713C1B2 kernel32.dll WaitForSingleObject+18 (0x000021BC,0xFFFFFFFF,0x02EE2A50,0x00000000)
006BB325 WoW.exe      <unknown symbol>+0 (0x02E5E200,0x00000000,0x02EE2A50,0x038DFF80)
006D56D5 WoW.exe      <unknown symbol>+0 (0x01E5FE08,0x518A7E27,0x00000000,0x02EE2A50)
007EDBCF WoW.exe      <unknown symbol>+0 (0x00000000,0x77134911,0x02EE2A50,0x038DFFD4)
007EDC74 WoW.exe      <unknown symbol>+0 (0x02EE2A50,0x7ECAFA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x007EDBF5,0x02EE2A50,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x007EDBF5,0x02EE2A50,0x00000000,0x00000000)

--- Thread ID: 2364 ---
7713C1B2 kernel32.dll WaitForSingleObject+18 (0x000021CC,0xFFFFFFFF,0x02EE2C70,0x00000000)
006BB325 WoW.exe      <unknown symbol>+0 (0x02E5E240,0x00000000,0x02EE2C70,0x03A4FF80)
006D56D5 WoW.exe      <unknown symbol>+0 (0x01E5FE48,0x51A37E27,0x00000000,0x02EE2C70)
007EDBCF WoW.exe      <unknown symbol>+0 (0x00000000,0x77134911,0x02EE2C70,0x03A4FFD4)
007EDC74 WoW.exe      <unknown symbol>+0 (0x02EE2C70,0x7EE3FA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x007EDBF5,0x02EE2C70,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x007EDBF5,0x02EE2C70,0x00000000,0x385DDED6)

--- Thread ID: 7048 ---
7713C1B2 kernel32.dll WaitForSingleObject+18 (0x00002234,0xFFFFFFFF,0x00000000,0x00000000)
72953DD0 d3d9.dll     Direct3DCreate9Ex+14190 (0x07FFFF94,0x77134911,0x06070040,0x07FFFFD4)
7295EBCE d3d9.dll     Direct3DCreate9Ex+58732 (0x06070040,0x07FFFFD4,0x77DCE4B6,0x06070040)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x06070040,0x7AB8FA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x7295EBC1,0x06070040,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x7295EBC1,0x06070040,0x00000000,0x00000000)

--- Thread ID: 4612 ---
770F1C7A kernel32.dll Sleep+15 (0x00000064,0x00000000,0x03C4FD50,0x049A0370)
006BD254 WoW.exe      <unknown symbol>+0 (0x049A0370,0x5A117E27,0x00000000,0x03C4FD50)
007EDBCF WoW.exe      <unknown symbol>+0 (0x00000000,0x77134911,0x03C4FD50,0x0816FFD4)
007EDC74 WoW.exe      <unknown symbol>+0 (0x03C4FD50,0x7551FA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x007EDBF5,0x03C4FD50,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x007EDBF5,0x03C4FD50,0x00000000,0x00000000)

--- Thread ID: 6116 ---
770F1C7A kernel32.dll Sleep+15 (0x00000001,0x082DFF6C,0x004555FE,0x00000001)
007CB33D WoW.exe      <unknown symbol>+0 (0x00000001,0x00455440,0x049B9BF0,0x000017E4)
004555FE WoW.exe      <unknown symbol>+0 (0x049B9BF0,0x00000000,0x00000000,0x02E6F450)
006A79A7 WoW.exe      <unknown symbol>+0 (0x00002248,0x082DFFD4,0x77DCE4B6,0x02E6F450)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x02E6F450,0x756AFA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x006A7950,0x02E6F450,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x006A7950,0x02E6F450,0x00000000,0x08B20000)

--- Thread ID: 6724 ---
7713C1B2 kernel32.dll WaitForSingleObject+18 (0x00002144,0xFFFFFFFF,0x089AFF6C,0x00780C82)
006AB710 WoW.exe      <unknown symbol>+0 (0xFFFFFFFF,0x012E9DD8,0x00001A44,0x00780C20)
00780C82 WoW.exe      <unknown symbol>+0 (0x012E9DD8,0x00000000,0x00000000,0x02E6F450)
006A79A7 WoW.exe      <unknown symbol>+0 (0x0000224C,0x089AFFD4,0x77DCE4B6,0x02E6F450)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x02E6F450,0x75DDFA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x006A7950,0x02E6F450,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x006A7950,0x02E6F450,0x00000000,0x08C80000)

--- Thread ID: 6576 ---
77134911 kernel32.dll BaseThreadInitThunk+18 (0x00000000,0x7163FA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x74B84383,0x00000000,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x74B84383,0x00000000,0x00000000,0x00000000)

--- Thread ID: 2512 ---
770F1C7A kernel32.dll Sleep+15 (0x0000000A,0x0C3BFF88,0x0083BDC9,0x0000000A)
00837CB4 WoW.exe      <unknown symbol>+0 (0x0000000A,0x00000000,0x000009D0,0x0C3BFF94)
0083BDC9 WoW.exe      <unknown symbol>+0 (0x0AC682E8,0x0C3BFFD4,0x77DCE4B6,0x0AC682E8)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x0AC682E8,0x717CFA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x0083BD5B,0x0AC682E8,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x0083BD5B,0x0AC682E8,0x00000000,0x00000000)

--- Thread ID: 5720 ---
770F1C7A kernel32.dll Sleep+15 (0x0000000A,0x0C52FF88,0x0083BDC9,0x0000000A)
00837CB4 WoW.exe      <unknown symbol>+0 (0x0000000A,0x00000000,0x00001658,0x0C52FF94)
0083BDC9 WoW.exe      <unknown symbol>+0 (0x0AC5FC68,0x0C52FFD4,0x77DCE4B6,0x0AC5FC68)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x0AC5FC68,0x7115FA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x0083BD5B,0x0AC5FC68,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x0083BD5B,0x0AC5FC68,0x00000000,0x00000000)

--- Thread ID: 4172 ---
7713C1B2 kernel32.dll WaitForSingleObject+18 (0x000022F8,0x000003E8,0x0C69FF60,0x00421B85)
006AB710 WoW.exe      <unknown symbol>+0 (0x000003E8,0x0000104C,0x00421C90,0x0D8E48C8)
00421B85 WoW.exe      <unknown symbol>+0 (0x00000000,0x0C69FF88,0x006A79A7,0x0D8E48C8)
00421CA1 WoW.exe      <unknown symbol>+0 (0x0D8E48C8,0x00000000,0x00000000,0x0D882018)
006A79A7 WoW.exe      <unknown symbol>+0 (0x00002394,0x0C69FFD4,0x77DCE4B6,0x0D882018)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x0D882018,0x712EFA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x006A7950,0x0D882018,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x006A7950,0x0D882018,0x00000000,0x00000000)

--- Thread ID: 7692 ---
7713C64E kernel32.dll WaitForMultipleObjects+24 (0x00000002,0x0C80FE2C,0x00000000,0x000001F4)
004223FB WoW.exe      <unknown symbol>+0 (0x00421CB0,0x0C80FF88,0x006A79A7,0x0D8E48B8)
00421CBE WoW.exe      <unknown symbol>+0 (0x0D8E48B8,0x00000000,0x00000000,0x0D882030)
006A79A7 WoW.exe      <unknown symbol>+0 (0x0000239C,0x0C80FFD4,0x77DCE4B6,0x0D882030)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x0D882030,0x71C7FA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x006A7950,0x0D882030,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x006A7950,0x0D882030,0x00000000,0x00000000)

--- Thread ID: 4112 ---
77F00208 USER32.dll   TranslateMessageEx+370 (0x000023AC,0x0C97FF2C,0xFFFFFFFF,0x00000000)
77EF9B58 USER32.dll   MsgWaitForMultipleObjects+31 (0x00000002,0x0C97FF2C,0x00000000,0xFFFFFFFF)
006D6E17 WoW.exe      <unknown symbol>+0 (0x01208738,0x00000000,0x0F161B80,0x0C97FF80)
006D56D5 WoW.exe      <unknown symbol>+0 (0x0D8DE220,0x5E907E27,0x00000000,0x0F161B80)
007EDBCF WoW.exe      <unknown symbol>+0 (0x00000000,0x77134911,0x0F161B80,0x0C97FFD4)
007EDC74 WoW.exe      <unknown symbol>+0 (0x0F161B80,0x71D0FA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x007EDBF5,0x0F161B80,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x007EDBF5,0x0F161B80,0x00000000,0x00000000)

--- Thread ID: 3008 ---
7713C1B2 kernel32.dll WaitForSingleObject+18 (0x000023B0,0xFFFFFFFF,0x069C2B58,0x069B3F20)
05AD50FD nvd3dum.dll  QueryOglResource+317645 (0x06893300,0x00000000,0x00000000,0x069B3F20)
05BB22EE nvd3dum.dll  NvDiagUmdCommand+711086 (0x069B3F20,0x0CAEFFD4,0x77DCE4B6,0x069B3F20)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x069B3F20,0x71E9FA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x05BB227F,0x069B3F20,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x05BB227F,0x069B3F20,0x00000000,0x00000000)

--- Thread ID: 6088 ---
7713C1B2 kernel32.dll WaitForSingleObject+18 (0x000023B0,0xFFFFFFFF,0x069C3050,0x069B3FB8)
05AD50FD nvd3dum.dll  QueryOglResource+317645 (0x06893300,0x00000000,0x00000000,0x069B3FB8)
05BB22EE nvd3dum.dll  NvDiagUmdCommand+711086 (0x069B3FB8,0x0CC5FFD4,0x77DCE4B6,0x069B3FB8)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x069B3FB8,0x7182FA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x05BB227F,0x069B3FB8,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x05BB227F,0x069B3FB8,0x00000000,0x00000000)

--- Thread ID: 6348 ---
7713C1B2 kernel32.dll WaitForSingleObject+18 (0x000023B0,0xFFFFFFFF,0x069C3F98,0x069B4050)
05AD50FD nvd3dum.dll  QueryOglResource+317645 (0x06893300,0x00000000,0x00000000,0x069B4050)
05BB22EE nvd3dum.dll  NvDiagUmdCommand+711086 (0x069B4050,0x0CDCFFD4,0x77DCE4B6,0x069B4050)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x069B4050,0x719BFA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x05BB227F,0x069B4050,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x05BB227F,0x069B4050,0x00000000,0x00000000)

--- Thread ID: 7148 ---
7713C1B2 kernel32.dll WaitForSingleObject+18 (0x000023B0,0xFFFFFFFF,0x069C3F00,0x069B3F20)
05AD50FD nvd3dum.dll  QueryOglResource+317645 (0x06893300,0x00000000,0x00000000,0x069B3F20)
05BB22EE nvd3dum.dll  NvDiagUmdCommand+711086 (0x069B3F20,0x0CF3FFD4,0x77DCE4B6,0x069B3F20)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x069B3F20,0x71B4FA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x05BB227F,0x069B3F20,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x05BB227F,0x069B3F20,0x00000000,0x7B9BFA12)

--- Thread ID: 7828 ---
75BC1FC8 mswsock.dll  <unknown symbol>+0 (0x00000001,0x1159FE58,0x1159FC50,0x1159FD54)
76E71693 WS2_32.dll   select+159 (0x00000001,0x1159FE58,0x1159FC50,0x1159FD54)
766E4A65 WININET.dll  InternetCrackUrlW+2819 (0x1159FF94,0x77134911,0x002679F8,0x1159FFD4)
76702DA0 WININET.dll  InternetSetStatusCallback+473 (0x002679F8,0x1159FFD4,0x77DCE4B6,0x002679F8)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x002679F8,0x6C1EFA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x76702D93,0x002679F8,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x76702D93,0x002679F8,0x00000000,0x00000000)

--- Thread ID: 6496 ---
7713C1B2 kernel32.dll WaitForSingleObject+18 (0x00002454,0xFFFFFFFF,0x00000000,0x1062EA2C)
0086D915 WoW.exe      <unknown symbol>+0 (0x0E36CBB8,0xFFFFFFFF,0x11A8FF88,0x0083BD94)
00837DF9 WoW.exe      <unknown symbol>+0 (0x0E36CBB8,0x00000000,0x00001960,0x11A8FF94)
0083BD94 WoW.exe      <unknown symbol>+0 (0x1062EA2C,0x11A8FFD4,0x77DCE4B6,0x1062EA2C)
77134911 kernel32.dll BaseThreadInitThunk+18 (0x1062EA2C,0x6CEFFA1D,0x00000000,0x00000000)
77DCE4B6 ntdll.dll    RtlInitializeExceptionChain+99 (0x0083BD5B,0x1062EA2C,0x00000000,0x00000000)
77DCE489 ntdll.dll    RtlInitializeExceptionChain+54 (0x0083BD5B,0x1062EA2C,0x00000000,0x7A9A5F86)

--- Thread ID: 3344 ---
77F00208 USER32.dll   TranslateMessageEx+370 (0x000024DC,0x11CFFF2C,0xFFFFFFFF,0x00000000)
77EF9B58 USER32.dll   MsgWaitForMultipleObjects+31 (0x00000002,0x11CFFF2C,0x00000000,0xFFFFFFFF)
006D6E17 WoW.exe      <unknown symbol>+0 (0x01208780,0x00000000,0x0F51CB98,0x11CFFF80)
006D56D5 WoW.exe      <unknown symbol>+0 (0x0D8DF920,0x43C87E27,

[alek900]

you need to pause wows main thread befor injecting.

kinda offtopic, but it may be interesting...
AutoIt Inline Assembly UDF - AutoIt Forums

[Jadd]

Thanks Alek.. seemed to help the both of us xD

[Dalord Urgod]

1st of all Thanks alek900 for pointing me in the right direction.
but...
the "thread suspend" code is not working so JetlagJad if it helped you would you mind shedding some light? (i cant PM yet but you can PM me)

$hWnd = WinGetHandle("World of Warcraft")
  $WoWThread = _WinAPI_GetWindowThreadProcessId($hWnd, $hProcess)
 If @error > 0 Then
	MsgBox(0, "Error", " Error #: " & @error & "[_Thread_GetID] = " & $WoWThread)
	Exit ;<<<<<<<<<<<-------THIS WILL STOP WOW FROM CRASHING WITH EVERY TEST!!!
  EndIf
  

Func _Thread_Suspend($hThread)
	Local $result = DllCall("Kernel32.dll", "int", "SuspendThread", "ptr", $hThread)
	Return SetError($result[0] = -1, 0, $result[0])
EndFunc   ;==>_Thread_Suspend

[jjaa]

If you want help with code, and you insist on injecting a whole load of bytes. At least comment in your code the ASM that those bytes represent.

Also if you want to use interact i suggest you use a better programing language.

[Dalord Urgod]

Ok Il give it a go...

obj = $Bobber

//read interact from object vtable
      uint interact = Memory.ReadUInt(hProcess, (Memory.ReadUInt(hProcess, obj) + (36 * 4)));
Autoit:
      $interact = _MemoryRead(_MemoryRead($Bobber + (36 * 4), $hProcess, 'uint'), $WoWProcess, 'uint')

//allocate memory
      uint CodeCave = Memory.AllocateMemory(hProcess, 0x1000);
      byte[] bInject = { 0x8B, 0x15, 0xEF, 0xBE, 0xAD, 0xDE, 0x64, 0xA1, 0x2C, 0x00, 0x00, 0x00, 0x8B, 0x00, 0x83, 0xC0, 0x10, 0x89, 0x10, 0x8B, 0x0D, 0xEF, 0xBE, 0xAD, 0xDE, 0xE8, 0, 0, 0, 0, 0xC3};
Autoit:
$lpCodeCave = _MemVirtualAllocEx($hProcess, $Null, 0x1000, $MEM_COMMIT, $PAGE_EXECUTE_READWRITE);
Dim $bInject[31] = [0x8B, 0x15, 0xEF, 0xBE, 0xAD, 0xDE, 0x64, 0xA1, 0x2C, 0x00, 0x00, 0x00, 0x8B, 0x00, 0x83, 0xC0, 0x10, 0x89, 0x10, 0x8B, 0x0D, 0xEF, 0xBE, 0xAD, 0xDE, 0xE8, 0, 0, 0, 0, 0xC3];

//inject memory
Memory.WriteMemory(hProcess, CodeCave, bInject);
Autoit:
_MemoryWrite($lpCodeCave,$hProcess, $bInject, 'byte[5]')


//patch relatives
Memory.WriteMemory(hProcess, (CodeCave + 2), s_curMgrPointer);
Memory.WriteMemory(hProcess, (CodeCave + 21), (CodeCave + 0x100));
Memory.WriteMemory(hProcess, (CodeCave + 26), (interact - (CodeCave + 30)));
Autoit:
_MemoryWrite($lpCodeCave + 2, $hProcess, $s_curMgrPointer)
_MemoryWrite($lpCodeCave + 21, $hProcess, $lpCodeCave + 0x100)
_MemoryWrite($lpCodeCave + 26, $hProcess, $interact - ($lpCodeCave + 30))


//write object with which we wish to interact to memory
 Memory.WriteMemory(hProcess, (CodeCave + 0x100), obj);
Autoit:
_MemoryWrite($lpCodeCave + 0x100, $hProcess, $S_Bobber)

      <<<<---------- This is where WoW Crashes ---------->>>>

//Execute injected code
IntPtr hThread = Memory.CreateRemoteThread(hProcess, CodeCave, 0);
Autoit:
$hThread = CreateRemoteThread($hProcess,$Null,0,$lpCodeCave,0,0,$Null)

//wait for code to execute
 Memory.WaitForSingleObject(hThread);
Autoit:      
_WinAPI_WaitForSingleObject($hThread, -1)


 //uint ec = Memory.GetExitCodeThread(hThread); 
 //clean up
 Memory.CloseHandle(hThread);
 Memory.VirtualFreeEx(hProcess, CodeCave, 0x1000, Memory.MEM_DECOMMIT);
Autoit:
_WinAPI_CloseHandle($hThread)
_MemVirtualFreeEx($hProcess, $lpCodeCave, 0x1000, $MEM_DECOMMIT)

THIS IS THE AUTOIT FUNCTION THAT IS CALLED @ //Execute injected code

Func CreateRemoteThread($hProcess, $lpThreadAttributes, $dwStackSize, $lpStartAddress, $lpParameter, $dwCreationFlags, $lpThreadId)
Local $Return
$Return = DllCall("kernel32.dll", "int", "CreateRemoteThread", "int", $hProcess, "ptr", $lpThreadAttributes, "int", $dwStackSize, "int", $lpStartAddress, "ptr", $lpParameter, "int", $dwCreationFlags, "int", $lpThreadId)
 Return $Return[0]
 EndFunc   ;

THIS IS WHAT I ADDED BASED ON alek900'S SUGESTION:

;//Suspend Thread
$hWnd = WinGetHandle("World of Warcraft")
$WoWThread = _WinAPI_GetWindowThreadProcessId($hWnd, $hProcess)
_Thread_Suspend($WoWThread)

 If @error > 0 Then
	MsgBox(0, "Error", " Error #: " & @error & "[_Thread_GetID] = " & $WoWThread)
	Exit ;<<<<<<<<<<<-------THIS WILL STOP WOW FROM CRASHING WITH EVERY TEST!!!
  EndIf

THIS IS THE AUTOIT FUNCTION THAT IS CALLED @ //Suspend Thread

Func _Thread_Suspend($hThread)
	Local $result = DllCall("Kernel32.dll", "int", "SuspendThread", "ptr", $hThread)
	Return SetError($result[0] = -1, 0, $result[0])
EndFunc   ;==>_Thread_Suspend

[BoogieManTM]

You still didn't comment the code that you're injecting.

Dim $bInject[31] = [0x8B, 0x15, 0xEF, 0xBE, 0xAD, 0xDE, 0x64, 0xA1, 0x2C, 0x00, 0x00, 0x00, 0x8B, 0x00, 0x83, 0xC0, 0x10, 0x89, 0x10, 0x8B, 0x0D, 0xEF, 0xBE, 0xAD, 0xDE, 0xE8, 0, 0, 0, 0, 0xC3];

Nobody is going to go through that by hand and figure out what it's actually doing - thus nobody will help you debug it.

[alek900]

hmm, this seems wrong...

_MemoryWrite($lpCodeCave, $WoWProcess, $bInject, 'byte[5]')

[Dalord Urgod]

Can you elaborate on that?
What do I need to change from value 6 to 7?

[UnknOwned]

Can you elaborate on that?
What do I need to change from value 6 to 7?

Using the CTM structure to do the interaction. But since it require you to move you can't make a fish bot with it.

[Dalord Urgod]

Alec $WoWProcess = $hProcess I just used $hProcess for the C++ guys to see what i was doing

[alek900]

was actually looking at

'byte[5]'

[Dalord Urgod]

Thanks to all that responded if/when I resolve the issues I will post my findings
Someone had posted a question here but it’s gone and I don’t remember it so I can’t reply sorry