Help with ObjectByGUID

[TheWolph]

When ever i try to run this code it crashs wow anyone know what im doing wrong? :confused:

int ObjectByGUID = 0x007BE110; //update every patch
BM.OpenProcessAndThread(Memory.GetProcessIdByProcessName("WoW"));
uint codeCave = BM.AllocateMemory();
BM.Asm.Clear();
BM.Asm.AddLine("push 0x10");
BM.Asm.AddLine("push {0}", GUIDHigh);   //local guid
BM.Asm.AddLine("push {0}", GUIDLow);   //local guid
BM.Asm.AddLine("mov eax, {0}", ObjectByGUID);
BM.Asm.AddLine("call eax");
BM.Asm.AddLine("add esp, 0x14");
BM.Asm.AddLine("retn");
BM.SuspendThread();
uint obj = BM.Asm.InjectAndExecute(codeCave); ;
BM.ResumeThread();
BM.FreeMemory(codeCave);
return obj;

Function that im copying (I think this my problem copying the wrong one)

0079B0B9   E8 12180200      CALL WoW.007BC8D0
0079B0BE   68 A1000000      PUSH 0A1
0079B0C3   68 78439900      PUSH WoW.00994378 
0079B0C8   6A 10                  PUSH 10
0079B0CA   52                       PUSH EDX  //high
0079B0CB   50                       PUSH EAX  //low
0079B0CC   E8 3F300200      CALL WoW.007BE110
0079B0D1   83C4 14              ADD ESP,14

[lanman92]

You need to add 0xC to esp after your function call. Also, you have to update the TLS before calling that. If you look at the function, it uses the thread-local storage, so you have to copy the ObjectManager into it. It's all over the place, you won't have to look far(hint: search).

[TheWolph]

I was missing 2 pushes

BM.Asm.AddLine("add esp, 0x14");

I also thought that the ObjectByGUID function updated the tls to the object manager but it just checks it

007BE110  /$ 55             PUSH EBP
007BE111  |. 8BEC           MOV EBP,ESP
007BE113  |. 64:8B0D 2C0000>MOV ECX,DWORD PTR FS:[2C]
007BE11A  |. A1 FCD93501    MOV EAX,DWORD PTR DS:[135D9FC]
007BE11F  |. 8B1481         MOV EDX,DWORD PTR DS:[ECX+EAX*4]
007BE122  |. 8B8A 10000000  MOV ECX,DWORD PTR DS:[EDX+10]
007BE128  |. 83EC 08        SUB ESP,8
007BE12B  |. 85C9           TEST ECX,ECX

just found a topic that is 4 days old thats the exact same as mine sorry XD thanks though lanman92 got it working