Can you recognize this function?

[tanis2000]

I'm having some troubles understanding why this function (part of WoW client) is crashing when I have my own FrameScript_Execute handler registered and being called.
Does anyone recognize it and has any idea what this function is actually meant to do?

    .text:00622220
    .text:00622220 ; ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦ S U B R O U T I N E ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦
    .text:00622220
    .text:00622220 ; Attributes: bp-based frame
    .text:00622220
    .text:00622220 sub_622220 proc near                    ; DATA XREF: .rdata:009E3358o
    .text:00622220
    .text:00622220 var_80= dword ptr -80h
    .text:00622220 var_2C= dword ptr -2Ch
    .text:00622220 var_C= dword ptr -0Ch
    .text:00622220 var_4= dword ptr -4
    .text:00622220
    .text:00622220 push    ebp
    .text:00622221 mov     ebp, esp
    .text:00622223 sub     esp, 2Ch
    .text:00622226 push    esi
    .text:00622227 mov     esi, ecx
    .text:00622229 cmp     dword ptr [esi+0F5Ch], 0
    .text:00622230 jz      loc_6223D5
    .text:00622236 push    edi
    .text:00622237 mov     edi, [esi+2934h]
    .text:0062223D call    sub_603EF0
    .text:00622242 cmp     dword ptr [esi+3B2Ch], 0
    .text:00622249 jz      short loc_622266
    .text:0062224B mov     eax, [esi+397Ch]
    .text:00622251 mov     ecx, [eax]
    .text:00622253 mov     edx, [ecx+0A8h]
    .text:00622259 push    eax
    .text:0062225A call    edx
    .text:0062225C mov     dword ptr [esi+3B2Ch], 0
    .text:00622266
    .text:00622266 loc_622266:                             ; CODE XREF: sub_622220+29j
    .text:00622266 mov     eax, [esi]
    .text:00622268 mov     edx, [eax+10h]
    .text:0062226B mov     ecx, esi
    .text:0062226D call    edx
    .text:0062226F cmp     byte ptr [esi+1C6h], 0
    .text:00622276 jz      loc_62232D
    .text:0062227C mov     eax, [esi+3B4Ch]
    .text:00622282 test    eax, eax
    .text:00622284 jz      short loc_6222D5
    .text:00622286 mov     ecx, [eax]
    .text:00622288 mov     edx, [ecx+18h]
    .text:0062228B push    1
    .text:0062228D push    eax
    .text:0062228E call    edx
    .text:00622290 mov     eax, [esi+3B4Ch]
    .text:00622296 mov     ecx, [eax]
    .text:00622298 mov     edx, [ecx+1Ch]
    .text:0062229B push    1
    .text:0062229D push    0
    .text:0062229F push    0
    .text:006222A1 push    eax
    .text:006222A2 call    edx
    .text:006222A4 cmp     eax, 1
    .text:006222A7 jnz     loc_62232D
    .text:006222AD lea     ecx, [ecx+0]
    .text:006222B0
    .text:006222B0 loc_6222B0:                             ; CODE XREF: sub_622220+B1j
    .text:006222B0 push    0                               ; dwMilliseconds
    .text:006222B2 call    sub_820880
    .text:006222B7 mov     eax, [esi+3B4Ch]
    .text:006222BD mov     ecx, [eax]
    .text:006222BF mov     edx, [ecx+1Ch]
    .text:006222C2 add     esp, 4
    .text:006222C5 push    1
    .text:006222C7 push    0
    .text:006222C9 push    0
    .text:006222CB push    eax
    .text:006222CC call    edx
    .text:006222CE cmp     eax, 1
    .text:006222D1 jz      short loc_6222B0
    .text:006222D3 jmp     short loc_62232D
    .text:006222D5 ; ---------------------------------------------------------------------------
    .text:006222D5
    .text:006222D5 loc_6222D5:                             ; CODE XREF: sub_622220+64j
    .text:006222D5 mov     eax, [esi+397Ch]
    .text:006222DB mov     ecx, [eax]
    .text:006222DD lea     edx, [ebp+var_4]
    .text:006222E0 push    edx
    .text:006222E1 push    0
    .text:006222E3 push    0
    .text:006222E5 push    0
    .text:006222E7 push    eax
    .text:006222E8 mov     eax, [ecx+48h]
    .text:006222EB call    eax
    .text:006222ED test    eax, eax
    .text:006222EF jl      short loc_62232D
    .text:006222F1 mov     eax, [ebp+var_4]
    .text:006222F4 mov     ecx, [eax]
    .text:006222F6 lea     edx, [ebp+var_2C]
    .text:006222F9 push    edx
    .text:006222FA push    eax
    .text:006222FB mov     eax, [ecx+30h]
    .text:006222FE call    eax
    .text:00622300 mov     eax, [ebp+var_4]
    .text:00622303 mov     ecx, [eax]
    .text:00622305 push    10h
    .text:00622307 push    0
    .text:00622309 lea     edx, [ebp+var_C]
    .text:0062230C push    edx
    .text:0062230D push    eax
    .text:0062230E mov     eax, [ecx+34h]
    .text:00622311 call    eax
    .text:00622313 test    eax, eax
    .text:00622315 jl      short loc_622322
    .text:00622317 mov     eax, [ebp+var_4]
    .text:0062231A mov     ecx, [eax]
    .text:0062231C mov     edx, [ecx+38h]
    .text:0062231F push    eax
    .text:00622320 call    edx
    .text:00622322
    .text:00622322 loc_622322:                             ; CODE XREF: sub_622220+F5j
    .text:00622322 mov     eax, [ebp+var_4]
    .text:00622325 mov     ecx, [eax]
    .text:00622327 mov     edx, [ecx+8]
    .text:0062232A push    eax
    .text:0062232B call    edx
    .text:0062232D
    .text:0062232D loc_62232D:                             ; CODE XREF: sub_622220+56j
    .text:0062232D                                         ; sub_622220+87j ...
    .text:0062232D test    edi, edi
    .text:0062232F pop     edi
    .text:00622330 jz      short loc_622339
    .text:00622332 mov     ecx, esi
    .text:00622334 call    sub_605180
    .text:00622339
    .text:00622339 loc_622339:                             ; CODE XREF: sub_622220+110j
    .text:00622339 mov     ecx, esi
    .text:0062233B call    sub_604680
    .text:00622340 mov     eax, [esi+397Ch]
    .text:00622346 mov     ecx, [eax]
    .text:00622348 mov     edx, [ecx+44h]
    .text:0062234B push    0
    .text:0062234D push    0
    .text:0062234F push    0
    .text:00622351 push    0
    .text:00622353 push    eax
    .text:00622354 call    edx
    .text:00622356 test    eax, eax
    .text:00622358 jge     short loc_622364
    .text:0062235A mov     dword ptr [esi+0F5Ch], 0
    .text:00622364
    .text:00622364 loc_622364:                             ; CODE XREF: sub_622220+138j
    .text:00622364 mov     eax, [esi+3AC0h]
    .text:0062236A test    eax, eax
    .text:0062236C jz      short loc_6223D5
    .text:0062236E cmp     dword ptr [esi+3ACCh], 0
    .text:00622375 jz      short loc_6223D5
    .text:00622377 fld     dword ptr [esi+3AC4h]
    .text:0062237D push    ecx
    .text:0062237E fstp    [esp+80h+var_80]
    .text:00622381 push    eax
    .text:00622382 mov     dword ptr [esi+3ACCh], 0
    .text:0062238C call    sub_85949E
    .text:00622391 fld     dword ptr [esi+3AC4h]
    .text:00622397 fstp    qword ptr [esp]
    .text:0062239A push    eax                             ; char
    .text:0062239B push    offset aNvapi_stereo_s          ; "NvAPI_Stereo_SetConvergence: status=%d "...
    .text:006223A0 call    sub_605BD0
    .text:006223A5 fld     dword ptr [esi+3AC8h]
    .text:006223AB mov     eax, [esi+3AC0h]
    .text:006223B1 fstp    [esp+8Ch+var_80]
    .text:006223B5 add     esp, 0Ch
    .text:006223B8 push    eax
    .text:006223B9 call    sub_859486
    .text:006223BE fld     dword ptr [esi+3AC8h]
    .text:006223C4 fstp    qword ptr [esp]
    .text:006223C7 push    eax                             ; char
    .text:006223C8 push    offset aNvapi_stereo_0          ; "NvAPI_Stereo_SetSeparation: status=%d s"...
    .text:006223CD call    sub_605BD0
    .text:006223D2 add     esp, 10h
    .text:006223D5
    .text:006223D5 loc_6223D5:                             ; CODE XREF: sub_622220+10j
    .text:006223D5                                         ; sub_622220+14Cj ...
    .text:006223D5 mov     ecx, esi
    .text:006223D7 call    sub_6220A0
    .text:006223DC pop     esi
    .text:006223DD mov     esp, ebp
    .text:006223DF pop     ebp
    .text:006223E0 retn
    .text:006223E0 sub_622220 endp
    .text:006223E0
    .text:006223E0 ; ---------------------------------------------------------------------------
    .text:006223E1 align 10h
    .text:006223F0
    .text:006223F0 ; ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦ S U B R O U T I N E ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦
    .text:006223F0
    .text:006223F0 ; Attributes: bp-based frame
    .text:006223F0
    .text:006223F0 sub_6223F0 proc near                    ; DATA XREF: .rdata:009E3368o
    .text:006223F0
    .text:006223F0 arg_0= dword ptr  8
    .text:006223F0 arg_4= dword ptr  0Ch
    .text:006223F0
    .text:006223F0 push    ebp
    .text:006223F1 mov     ebp, esp
    .text:006223F3 push    esi
    .text:006223F4 mov     esi, ecx
    .text:006223F6 cmp     dword ptr [esi+0F5Ch], 0
    .text:006223FD jz      loc_6224E1
    .text:00622403 cmp     dword ptr [esi+0F60h], 0
    .text:0062240A jnz     loc_6224E1
    .text:00622410 push    ebx
    .text:00622411 push    edi
    .text:00622412 call    sub_6247C0
    .text:00622417 mov     eax, [ebp+arg_4]
    .text:0062241A mov     edi, [ebp+arg_0]
    .text:0062241D push    eax
    .text:0062241E push    edi
    .text:0062241F mov     ecx, esi
    .text:00622421 call    nullsub_4
    .text:00622426 xor     ebx, ebx
    .text:00622428 cmp     [esi+228h], ebx
    .text:0062242E jnz     short loc_622440
    .text:00622430 mov     ecx, [esi+2870h]
    .text:00622436 mov     eax, [ecx+18h]
    .text:00622439 xor     edx, edx
    .text:0062243B div     dword ptr [ecx+0Ch]
    .text:0062243E mov     ebx, eax
    .text:00622440
    .text:00622440 loc_622440:                             ; CODE XREF: sub_6223F0+3Ej
    .text:00622440 cmp     [ebp+arg_4], 0
    .text:00622444 jz      short loc_6224A8
    .text:00622446 mov     ecx, [esi+397Ch]
    .text:0062244C mov     edx, [ecx]
    .text:0062244E mov     ecx, [edi+8]
    .text:00622451 movzx   eax, word ptr [edi+0Ch]
    .text:00622455 mov     [ebp+arg_0], edx
    .text:00622458 mov     edx, [edi]
    .text:0062245A push    ecx
    .text:0062245B push    edx
    .text:0062245C mov     ecx, esi
    .text:0062245E mov     [ebp+arg_4], eax
    .text:00622461 call    sub_603FE0
    .text:00622466 movzx   edx, word ptr [edi+0Eh]
    .text:0062246A push    eax
    .text:0062246B mov     eax, [esi+28BCh]
    .text:00622471 mov     ecx, [eax+18h]
    .text:00622474 mov     eax, [ebp+arg_4]
    .text:00622477 shr     ecx, 1
    .text:00622479 add     ecx, [edi+4]
    .text:0062247C sub     edx, eax
    .text:0062247E push    ecx
    .text:0062247F add     edx, 1
    .text:00622482 push    edx
    .text:00622483 mov     edx, [esi+397Ch]
    .text:00622489 push    eax
    .text:0062248A mov     eax, [edi]
    .text:0062248C mov     ecx, ds:dword_9E415C[eax*4]
    .text:00622493 mov     eax, [ebp+arg_0]
    .text:00622496 push    ebx
    .text:00622497 push    ecx
    .text:00622498 mov     ecx, [eax+148h]
    .text:0062249E push    edx
    .text:0062249F call    ecx
    .text:006224A1 pop     edi
    .text:006224A2 pop     ebx
    .text:006224A3 pop     esi
    .text:006224A4 pop     ebp
    .text:006224A5 retn    8
    .text:006224A8 ; ---------------------------------------------------------------------------
    .text:006224A8

When it reaches 0x0062225A (call edx) sometime ecx contains zero and the function being called just crashes as it tries to access [ecx+0x04] which is no good.

The function being called is this one:

    debug044:02C22B08 ; ---------------------------------------------------------------------------
    debug044:02C22B08 mov     eax, [ecx+0Ch]
    debug044:02C22B0B mov     ecx, [ecx+4]
    debug044:02C22B0E call    eax
    debug044:02C22B10 pop     ecx
    debug044:02C22B11 mov     byte ptr [ecx+8], 0
    debug044:02C22B15 test    byte ptr [ecx+4], 5Fh
    debug044:02C22B19 jnz     short loc_2C22B61
    debug044:02C22B1B
    debug044:02C22B1B loc_2C22B1B:                            ; CODE XREF: debug044:02C22B6Aj
    debug044:02C22B1B mov     edx, [esp]
    debug044:02C22B1E mov     large fs:0, edx
    debug044:02C22B25 add     esp, 0Ch
    debug044:02C22B28 mov     esp, ebp
    debug044:02C22B2A pop     ebp
    debug044:02C22B2B retn    4
    debug044:02C22B2B ; ---------------------------------------------------------------------------

[lanman92]

It's a __thiscall function. Idk if you're on mac or something, but you'll have to reverse further to use that function.

[Cypher]

Hai guize. I herd that crash logs don't exist anymore.

[lanman92]

BTW, now that I look at it, it looks like endscene(almost). The 0xA8 offset is really the main reason, but it may not be what's failing...

[Cypher]

EndScene isn't __thiscall, it's __stdcall.

[Apoc]

No. EndScene is WINAPI!

[Cypher]

No. EndScene is WINAPI!

That's a preprocessor definition not a calling convention you ****tard.

[Flowerew]

No. EndScene is WINAPI!

I see what you did there...

[tanis2000]

Of course I had a crash log but I'm too dumb to remember to attach it.. :-P

Here it is:

==============================================================================
World of WarCraft (build 10505)

Exe:      C:\Games\World of Warcraft\Wow.exe
Time:     Nov 12, 2009  6:07:04.992 PM
User:     Guest
Computer: TEAPOT
------------------------------------------------------------------------------

This application has encountered a critical error:

ERROR #132 (0x85100084) Fatal Exception
Program:	C:\Games\World of Warcraft\Wow.exe
Exception:	0xC0000005 (ACCESS_VIOLATION) at 001B:02C22B08

The instruction at "0x02C22B08" referenced memory at "0x0000000C".
The memory could not be "read".


WoWBuild: 10505
Realm: xxx
Local Zone: Northshire Vineyards, Elwynn Forest
Local Player: xxx
Total lua memory: 9906KB
Current Addon: (null)
Current Addon function: UNKNOWN
Current Addon object: (null)
Add Ons: 
Settings: 
SET locale "enGB"
SET hwDetect "0"
SET gxResolution "1440x900"
SET gxRefresh "60"
SET gxMultisampleQuality "0.000000"
SET gxFixLag "0"
SET fullAlpha "1"
SET SmallCull "0.040000"
SET DistCull "500.000000"
SET trilinear "1"
SET frillDensity "32"
SET farclip "1277"
SET pixelShaders "1"
SET particleDensity "0.10000000149012"
SET unitDrawDist "300.000000"
SET movie "0"
SET realmList "eu.logon.worldofwarcraft.com"
SET gxMultisample "6"
SET anisotropic "16"
SET M2UsePixelShaders "1"
SET Gamma "1.000000"
SET readTOS "1"
SET readEULA "1"
SET SoundVolume "1"
SET MasterVolume "1"
SET realmName "Terokkar"
SET gameTip "26"
SET AmbienceVolume "0.60000002384186"
SET uiScale "0.81000000238419"
SET mouseSpeed "1"
SET UnitNamePlayer "0"
SET readScanning "-1"
SET readContest "-1"
SET gxVSync "0"
SET MusicVolume "0.40000000596046"
SET EnableMusic "0"
SET EmoteSounds "0"
SET SoundListenerAtCharacter "0"
SET EnableErrorSpeech "0"
SET CombatLogRangeCreature "150"
SET CombatDeathLogRange "150"
SET showToolsUI "1"
SET patchlist "eu.version.worldofwarcraft.com"
SET DesktopGamma "1"
SET coresDetected "2"
SET readTerminationWithoutNotice "1"
SET Sound_VoiceChatInputDriverName "System Default"
SET Sound_VoiceChatOutputDriverName "Realtek HD Audio output"
SET Sound_OutputDriverName "Realtek HD Audio output"
SET videoOptionsVersion "2"
SET ChatMusicVolume "0.29999998211861"
SET ChatSoundVolume "0.39999997615814"
SET ChatAmbienceVolume "0.29999998211861"
SET groundEffectDist "70"
SET OutboundChatVolume "1"
SET InboundChatVolume "1"
SET VoiceActivationSensitivity "0.39999997615814"
SET Sound_VoiceChatOutputDriverIndex "1"
SET Sound_OutputDriverIndex "1"
SET showPartyDebuffs "0"
SET Sound_MasterVolume "1"
SET Sound_SFXVolume "1"
SET Sound_MusicVolume "0.40000000596046"
SET Sound_AmbienceVolume "0.60000002384186"
SET gxWindow "1"
SET installType "Retail"
SET portal "eu"
SET baseMip "1"
SET textureFilteringMode "0"
SET spellEffectLevel "0"
SET environmentDetail "0.5"
SET weatherDensity "0"
SET ffxGlow "0"
SET ffxDeath "0"
SET accounttype "RT"
SET Sound_EnableAllSound "0"
SET checkAddonVersion "0"

----------------------------------------
               GxInfo
----------------------------------------
GxApi: Direct3d9
Adapter Count: 1

Adapter 0 (primary):
  Driver: ati2dvag.dll
  Version: 6.14.0010.6903
  Description: ATI Mobility Radeon X1600
  DeviceName: \\.\DISPLAY1

------------------------------------------------------------------------------

----------------------------------------
    x86 Registers
----------------------------------------

EAX=02C22A80  EBX=05917F68  ECX=00000000  EDX=0034CA80  ESI=05EF1008
EDI=00000000  EBP=0019FD50  ESP=0019FD40  EIP=02C22B08  FLG=00010246
CS =001B      DS =0023      ES =0023      SS =0023      FS =003B      GS =0000


----------------------------------------
    Stack Trace (Manual)
----------------------------------------

Address  Frame    Logical addr  Module

Showing 22/22 threads...

--- Thread ID: 5204 [Current Thread] ---
02C22B08 0019FD50 0000:00000000 <unknown>
0062225C 0019FD90 0001:0022125C C:\Games\World of Warcraft\Wow.exe
00603B1F 0019FDA4 0001:00202B1F C:\Games\World of Warcraft\Wow.exe
0044E35F 0019FE5C 0001:0004D35F C:\Games\World of Warcraft\Wow.exe
00427069 0019FE8C 0001:00026069 C:\Games\World of Warcraft\Wow.exe
00424259 0019FEB8 0001:00023259 C:\Games\World of Warcraft\Wow.exe
004256EA 0019FF0C 0001:000246EA C:\Games\World of Warcraft\Wow.exe
00425731 0019FF24 0001:00024731 C:\Games\World of Warcraft\Wow.exe
00406D9D 0019FFC0 0001:00005D9D C:\Games\World of Warcraft\Wow.exe
7C817077 0019FFF0 0001:00016077 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 5532 ---
**** Unable to retrieve thread context, error: 6

--- Thread ID: 4776 ---
77F68631 02A9FFB4 0001:00027631 C:\WINDOWS\system32\ADVAPI32.dll
7C80B729 02A9FFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 5968 ---
7C80A115 02E6FEF4 0001:00009115 C:\WINDOWS\system32\kernel32.dll
79F1A361 02E6FF54 0001:000A9361 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F1A2BE 02E6FF84 0001:000A92BE C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F1A1E5 02E6FFB4 0001:000A91E5 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
7C80B729 02E6FFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 5080 ---
79E8C5F9 0307FCAC 0001:0001B5F9 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E8C52F 0307FCFC 0001:0001B52F C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E8C54E 0307FD10 0001:0001B54E C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F762A0 0307FD2C 0001:001052A0 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F7A728 0307FD40 0001:00109728 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E9848F 0307FD54 0001:0002748F C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E9842B 0307FDE8 0001:0002742B C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E98351 0307FE24 0001:00027351 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F074D4 0307FE4C 0001:000964D4 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F074E5 0307FE5C 0001:000964E5 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F5445C 0307FE94 0001:000E345C C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F75715 0307FFB4 0001:00104715 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
7C80B729 0307FFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 4528 ---
79E8C5F9 031EFDE4 0001:0001B5F9 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E8C52F 031EFE34 0001:0001B52F C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E8C54E 031EFE48 0001:0001B54E C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79EFC1D5 031EFF14 0001:0008B1D5 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F75715 031EFFB4 0001:00104715 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
7C80B729 031EFFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 4588 ---
7A13C15D 0547FFB4 0001:002CB15D C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
7C80B729 0547FFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 6048 ---
79F5631C 055EFE14 0001:000E531C C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F75715 055EFFB4 0001:00104715 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
7C80B729 055EFFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 5428 ---
79E8D050 0575FE98 0001:0001C050 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E8D06A 0575FED4 0001:0001C06A C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E7C7E5 0575FEE4 0001:0000B7E5 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79EB7666 0575FFB4 0001:00046666 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
7C80B729 0575FFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 3116 ---
02CBA188 058CF744 0000:00000000 <unknown>
6778BF3F 058CF76C 0003:00001F3F C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\af21e3011fb4e107b13ea5c40c351ec4\System.Runtime.Remoting.ni.dll
678145EC 058CF7B8 0003:0008A5EC C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\af21e3011fb4e107b13ea5c40c351ec4\System.Runtime.Remoting.ni.dll
792D6D66 058CF7C4 0003:00077D66 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\7124a40b9998f7b63c86bd1a2125ce26\mscorlib.ni.dll
792E01EF 058CF7D8 0003:000811EF C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\7124a40b9998f7b63c86bd1a2125ce26\mscorlib.ni.dll
792D6CE4 058CF7F0 0003:00077CE4 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\7124a40b9998f7b63c86bd1a2125ce26\mscorlib.ni.dll
79E71B4C 058CF800 0001:00000B4C C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E821B9 058CF880 0001:000111B9 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E96531 058CF9B8 0001:00025531 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E96564 058CF9D4 0001:00025564 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E96582 058CF9EC 0001:00025582 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F55623 058CFBD4 0001:000E4623 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E9848F 058CFBE8 0001:0002748F C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E9842B 058CFC7C 0001:0002742B C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E98351 058CFCB8 0001:00027351 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E984DD 058CFCE0 0001:000274DD C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F553F4 058CFCF8 0001:000E43F4 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F554CE 058CFD94 0001:000E44CE C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F75715 058CFFB4 0001:00104715 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
7C80B729 058CFFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 4220 ---
7C802455 059DFF40 0001:00001455 C:\WINDOWS\system32\kernel32.dll
00707CE5 059DFF60 0001:00306CE5 C:\Games\World of Warcraft\Wow.exe
0071EB2A 059DFF74 0001:0031DB2A C:\Games\World of Warcraft\Wow.exe
0084646F 059DFFAC 0001:0044546F C:\Games\World of Warcraft\Wow.exe
00846514 059DFFEC 0001:00445514 C:\Games\World of Warcraft\Wow.exe

--- Thread ID: 5952 ---
7C802455 0645FB6C 0001:00001455 C:\WINDOWS\system32\kernel32.dll
0082088D 0645FB78 0001:0041F88D C:\Games\World of Warcraft\Wow.exe
0045F1A5 0645FF98 0001:0005E1A5 C:\Games\World of Warcraft\Wow.exe
006E7BD7 0645FFB4 0001:002E6BD7 C:\Games\World of Warcraft\Wow.exe
7C80B729 0645FFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 5404 ---
7C802542 065CFF70 0001:00001542 C:\WINDOWS\system32\kernel32.dll
006EA130 065CFF80 0001:002E9130 C:\Games\World of Warcraft\Wow.exe
007D2772 065CFF98 0001:003D1772 C:\Games\World of Warcraft\Wow.exe
006E7BD7 065CFFB4 0001:002E6BD7 C:\Games\World of Warcraft\Wow.exe
7C80B729 065CFFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 2588 ---
7C802542 09B5FF74 0001:00001542 C:\WINDOWS\system32\kernel32.dll
006EA130 09B5FF84 0001:002E9130 C:\Games\World of Warcraft\Wow.exe
00491FA9 09B5FFB4 0001:00090FA9 C:\Games\World of Warcraft\Wow.exe
7C80B729 09B5FFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 4952 ---
7C802542 09EDFF64 0001:00001542 C:\WINDOWS\system32\kernel32.dll
006EA130 09EDFF74 0001:002E9130 C:\Games\World of Warcraft\Wow.exe
00420B85 09EDFF8C 0001:0001FB85 C:\Games\World of Warcraft\Wow.exe
00420CF1 09EDFF98 0001:0001FCF1 C:\Games\World of Warcraft\Wow.exe
006E7BD7 09EDFFB4 0001:002E6BD7 C:\Games\World of Warcraft\Wow.exe
7C80B729 09EDFFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 4736 ---
7C80A115 0A04FD34 0001:00009115 C:\WINDOWS\system32\kernel32.dll
004213EB 0A04FF8C 0001:000203EB C:\Games\World of Warcraft\Wow.exe
00420B2E 0A04FF98 0001:0001FB2E C:\Games\World of Warcraft\Wow.exe
006E7BD7 0A04FFB4 0001:002E6BD7 C:\Games\World of Warcraft\Wow.exe
7C80B729 0A04FFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 4296 ---
7E3995F9 0AF1FF18 0001:000085F9 C:\WINDOWS\system32\USER32.dll
7E3996A8 0AF1FF34 0001:000086A8 C:\WINDOWS\system32\USER32.dll
0071DA46 0AF1FF60 0001:0031CA46 C:\Games\World of Warcraft\Wow.exe
0071EB2A 0AF1FF74 0001:0031DB2A C:\Games\World of Warcraft\Wow.exe
0084646F 0AF1FFAC 0001:0044546F C:\Games\World of Warcraft\Wow.exe
00846514 0AF1FFEC 0001:00445514 C:\Games\World of Warcraft\Wow.exe

--- Thread ID: 3020 ---
719D5FA7 0B35FC04 0001:00004FA7 C:\WINDOWS\system32\mswsock.dll
71A3314F 0B35FC54 0001:0000214F C:\WINDOWS\system32\WS2_32.dll
3F9DE9A9 0B35FFAC 0001:0000D9A9 C:\WINDOWS\system32\WININET.dll
3F9FDEAB 0B35FFB4 0001:0002CEAB C:\WINDOWS\system32\WININET.dll
7C80B729 0B35FFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 5480 ---
7C80B729 0BB8FFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 5832 ---
7C80B729 0BE6FFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 5304 ---
79EC45F9 122AFFA8 0001:000535F9 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79EC44A7 122AFFB4 0001:000534A7 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
7C80B729 122AFFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

--- Thread ID: 5104 ---
79E8C5F9 1C68FBCC 0001:0001B5F9 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E8C52F 1C68FC1C 0001:0001B52F C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79E8C54E 1C68FC30 0001:0001B54E C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79EC43BB 1C68FCB0 0001:000533BB C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79EC4849 1C68FD14 0001:00053849 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
79F75715 1C68FFB4 0001:00104715 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
7C80B729 1C68FFEC 0001:0000A729 C:\WINDOWS\system32\kernel32.dll

----------------------------------------
    Stack Trace (Using DBGHELP.DLL)
----------------------------------------

Showing 22/22 threads...

--- Thread ID: 5204 [Current Thread] ---
02C22B08 <unknown module> <unknown symbol>+0 (0x0034CA80,0x00A3AB49,0x061B4738,0x00000020)

--- Thread ID: 5532 ---
**** Unable to gain access to the thread, error: 

--- Thread ID: 4776 ---
77F68631 ADVAPI32.dll WmiFreeBuffer+590 (0x00000000,0x7C9242AF,0x00000000,0x00000000)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x77F6848A,0x00000000,0x00000000,0x000000C8)

--- Thread ID: 5968 ---
7C80A115 kernel32.dll WaitForMultipleObjects+24 (0x00000003,0x02E6FF1C,0x00000000,0xFFFFFFFF)
79F1A361 mscorwks.dll ClrCreateManagedInstance+58059 (0x2BB18B08,0x00000000,0x79F19164,0x00000000)
79F1A2BE mscorwks.dll ClrCreateManagedInstance+57896 (0x2BB18B38,0x79F74431,0x79F19164,0x00000000)
79F1A1E5 mscorwks.dll ClrCreateManagedInstance+57679 (0x00000000,0x79F74431,0x79F19164,0x00000000)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x79F1A19F,0x00000000,0x00000000,0x00000001)

--- Thread ID: 5080 ---
79E8C5F9 mscorwks.dll LogHelp_TerminateOnAssert+97 (0x00000178,0x000007D0,0x00000000,0x2A508870)
79E8C52F mscorwks.dll DllUnregisterServerInternal+66835 (0x000007D0,0x00000000,0x00000000,0x0307FD2C)
79E8C54E mscorwks.dll DllUnregisterServerInternal+66866 (0x000007D0,0x00000000,0x00000000,0x002FCCF8)
79F762A0 mscorwks.dll CorExitProcess+142026 (0x002FCCC8,0x0307FE30,0x002FD4C8,0x0307FD54)
79F7A728 mscorwks.dll CorExitProcess+159570 (0x0307FE30,0x00000000,0x00000000,0x0307FDE8)
79E9848F mscorwks.dll CoUninitializeEE+19979 (0x0307FE30,0x0307FDDC,0x79FA6A6B,0x2A508964)
79E9842B mscorwks.dll CoUninitializeEE+19879 (0x0307FE30,0x2A508AA8,0x00000000,0x00000001)
79E98351 mscorwks.dll CoUninitializeEE+19661 (0x0307FE30,0x00000000,0x002E95D0,0x00000000)
79F074D4 mscorwks.dll GetPrivateContextsPerfCounters+60725 (0x79F7A6DD,0x00000008,0x0307FE94,0x79F5445C)
79F074E5 mscorwks.dll GetPrivateContextsPerfCounters+60742 (0x79F7A6DD,0x2A508A18,0x00000000,0x79F543B3)
79F5445C mscorwks.dll CorExitProcess+3206 (0x00000000,0x00000000,0x00000000,0x00000000)
79F75715 mscorwks.dll CorExitProcess+139071 (0x002FD4C8,0x00730074,0x00610020,0x002FD4C8)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x79F756CF,0x002FD4C8,0x00000000,0x00000000)

--- Thread ID: 4528 ---
79E8C5F9 mscorwks.dll LogHelp_TerminateOnAssert+97 (0x0000015C,0xFFFFFFFF,0x00000000,0x2A498AB8)
79E8C52F mscorwks.dll DllUnregisterServerInternal+66835 (0xFFFFFFFF,0x00000000,0x00000000,0x031EFF14)
79E8C54E mscorwks.dll DllUnregisterServerInternal+66866 (0xFFFFFFFF,0x00000000,0x00000000,0x031EFF08)
79EFC1D5 mscorwks.dll GetPrivateContextsPerfCounters+14902 (0x00301708,0x86E14000,0x804FB1B4,0x86E1418C)
79F75715 mscorwks.dll CorExitProcess+139071 (0x00300590,0x00000004,0x79E7F1A8,0x00300590)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x79F756CF,0x00300590,0x00000000,0x00905A4D)

--- Thread ID: 4588 ---
7A13C15D mscorwks.dll TranslateSecurityAttributes+169194 (0x00000001,0x00000000,0x00000410,0x003106D8)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x7A13C07C,0x003106D8,0x00000000,0x00000000)

--- Thread ID: 6048 ---
79F5631C mscorwks.dll CorExitProcess+11078 (0x00000000,0x00000000,0x00000000,0x00000000)
79F75715 mscorwks.dll CorExitProcess+139071 (0x00324290,0x00000000,0x00000026,0x00324290)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x79F756CF,0x00324290,0x00000000,0x00000000)

--- Thread ID: 5428 ---
79E8D050 mscorwks.dll LogHelp_TerminateOnAssert+2744 (0x000001F4,0x00000000,0x2C228A58,0x00000000)
79E8D06A mscorwks.dll LogHelp_TerminateOnAssert+2770 (0x000001F4,0x00000000,0x0575FFB4,0x79EB7666)
79E7C7E5 mscorwks.dll DllUnregisterServerInternal+1993 (0x000001F4,0x5B794E94,0x00000039,0x848FF252)
79EB7666 mscorwks.dll CreateAssemblyNameObject+91739 (0x00000000,0x7C9201DB,0x00000000,0x00000000)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x79EB75D1,0x00000000,0x00000000,0x00000000)

--- Thread ID: 3116 ---
02CBA188 <unknown module> <unknown symbol>+0 (0x058CF7A8,0x0337E78C,0x0337C66C,0x058CF76C)
6778BF3F System.Runtime.Remoting.ni.dll <unknown symbol>+0 (0x058CF81C,0x0337E81C,0x0333D1C4,0x0337E768)
678145EC System.Runtime.Remoting.ni.dll <unknown symbol>+0 (0x0337CB88,0x058CF7D8,0x792E01EF,0x058CF81C)
792D6D66 mscorlib.ni.dll <unknown symbol>+0 (0x058CF81C,0x0337CB88,0x0337CB54,0x058CF7F0)
792E01EF mscorlib.ni.dll <unknown symbol>+0 (0x0331E88C,0x00000000,0x00335A08,0x00000000)
792D6CE4 mscorlib.ni.dll <unknown symbol>+0 (0x00000000,0x00000000,0x058CF880,0x79E821B9)
79E71B4C mscorwks.dll <unknown symbol>+0 (0x058CF8D0,0x00000000,0x058CF8A0,0x00000000)
79E821B9 mscorwks.dll DllUnregisterServerInternal+24989 (0x058CF8D0,0x00000000,0x058CF8A0,0x00000000)
79E96531 mscorwks.dll CoUninitializeEE+11949 (0x7924290C,0x058CFB14,0x058CFA4C,0x00000000)
79E96564 mscorwks.dll CoUninitializeEE+12000 (0x7924290C,0x058CFB14,0x058CFA4C,0x00000000)
79E96582 mscorwks.dll CoUninitializeEE+12030 (0x058CFA4C,0x2CDB8F58,0x00335A08,0x058CFCC4)
79F55623 mscorwks.dll CorExitProcess+7757 (0x058CFD50,0x00000000,0x00000000,0x058CFC7C)
79E9848F mscorwks.dll CoUninitializeEE+19979 (0x058CFCC4,0x058CFC70,0x79FA6A6B,0x2CDB88F0)
79E9842B mscorwks.dll CoUninitializeEE+19879 (0x058CFCC4,0x2CDB8834,0x00000000,0x00335A08)
79E98351 mscorwks.dll CoUninitializeEE+19661 (0x058CFCC4,0x00000001,0x00000000,0x00000001)
79E984DD mscorwks.dll CoUninitializeEE+20057 (0x00000001,0x79F55509,0x058CFD50,0x00000002)
79F553F4 mscorwks.dll CorExitProcess+7198 (0x00000001,0x79F55509,0x058CFD50,0x058CFD88)
79F554CE mscorwks.dll CorExitProcess+7416 (0x00324688,0x00000000,0x00000000,0x00000000)
79F75715 mscorwks.dll CorExitProcess+139071 (0x00321598,0x00000000,0x00000000,0x00321598)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x79F756CF,0x00321598,0x00000000,0x00000008)

--- Thread ID: 4220 ---
7C802455 kernel32.dll Sleep+15 (0x00000064,0xFBEAF3EA,0x05918AC0,0x05918A58)
00707CE5 Wow.exe      <unknown symbol>+0 (0x00000000,0xFBEAF3EA,0x05918AC0,0x059DFFAC)
0071EB2A Wow.exe      <unknown symbol>+0 (0x05918A58,0x237DCE01,0xFBEAF3EA,0x05918AC0)
0084646F Wow.exe      <unknown symbol>+0 (0xC6CC0F2B,0x7C80B729,0x05918AC0,0xFBEAF3EA)
00846514 Wow.exe      <unknown symbol>+0 (0x00846495,0x05918AC0,0x00000000,0x05B00000)

--- Thread ID: 5952 ---
7C802455 kernel32.dll Sleep+15 (0x00000001,0x0645FF98,0x0045F1A5,0x00000001)
0082088D Wow.exe      <unknown symbol>+0 (0x00000001,0x0045EFD0,0x05917EE8,0x00001740)
0045F1A5 Wow.exe      <unknown symbol>+0 (0x05917EE8,0x00000000,0x00000000,0x05EFAD90)
006E7BD7 Wow.exe      <unknown symbol>+0 (0x0000234C,0x00000000,0x00000000,0x05EFAD90)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x006E7B80,0x05EFAD90,0x00000000,0x00000000)

--- Thread ID: 5404 ---
7C802542 kernel32.dll WaitForSingleObject+18 (0x000022BC,0xFFFFFFFF,0x065CFF98,0x007D2772)
006EA130 Wow.exe      <unknown symbol>+0 (0xFFFFFFFF,0x0133BF00,0x0000151C,0x007D2710)
007D2772 Wow.exe      <unknown symbol>+0 (0x0133BF00,0x00000020,0x00000000,0x061B4630)
006E7BD7 Wow.exe      <unknown symbol>+0 (0x00002354,0x00000020,0x00000000,0x061B4630)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x006E7B80,0x061B4630,0x00000000,0x00000380)

--- Thread ID: 2588 ---
7C802542 kernel32.dll WaitForSingleObject+18 (0x000022B0,0xFFFFFFFF,0x09B5FFB4,0x00491FA9)
006EA130 Wow.exe      <unknown symbol>+0 (0xFFFFFFFF,0x00000A1C,0x00491DD0,0x00000000)
00491FA9 Wow.exe      <unknown symbol>+0 (0x0000235C,0x00000000,0x00000000,0x08A6E090)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x006E7B80,0x08A6E090,0x00000000,0x00000008)

--- Thread ID: 4952 ---
7C802542 kernel32.dll WaitForSingleObject+18 (0x00000218,0x000003E8,0x09EDFF8C,0x00420B85)
006EA130 Wow.exe      <unknown symbol>+0 (0x000003E8,0x00001358,0x00420CE0,0x08B26BF8)
00420B85 Wow.exe      <unknown symbol>+0 (0x00000000,0x09EDFFB4,0x006E7BD7,0x08B26BF8)
00420CF1 Wow.exe      <unknown symbol>+0 (0x08B26BF8,0x00000000,0x00000000,0x08A6E090)
006E7BD7 Wow.exe      <unknown symbol>+0 (0x00002404,0x00000000,0x00000000,0x08A6E090)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x006E7B80,0x08A6E090,0x00000000,0x00000000)

--- Thread ID: 4736 ---
7C80A115 kernel32.dll WaitForMultipleObjects+24 (0x00000003,0x0A04FE58,0x00000000,0x000001F4)
004213EB Wow.exe      <unknown symbol>+0 (0x00420B20,0x0A04FFB4,0x006E7BD7,0x08B26BE8)
00420B2E Wow.exe      <unknown symbol>+0 (0x08B26BE8,0x00000000,0x00000000,0x08B274E0)
006E7BD7 Wow.exe      <unknown symbol>+0 (0x00002408,0x00000000,0x00000000,0x08B274E0)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x006E7B80,0x08B274E0,0x00000000,0x000000C8)

--- Thread ID: 4296 ---
7E3995F9 USER32.dll   GetLastInputInfo+261 (0x00000002,0x0AF1FF58,0xFFFFFFFF,0x00000000)
7E3996A8 USER32.dll   MsgWaitForMultipleObjects+31 (0x00000002,0x0AF1FF58,0x00000000,0xFFFFFFFF)
0071DA46 Wow.exe      <unknown symbol>+0 (0x012AE250,0x7C98ECC0,0x08D2D6E0,0x0AF1FFAC)
0071EB2A Wow.exe      <unknown symbol>+0 (0x08BE1308,0x2C11CE01,0x7C98ECC0,0x08D2D6E0)
0084646F Wow.exe      <unknown symbol>+0 (0x7C9268D6,0x7C80B729,0x08D2D6E0,0x7C98ECC0)
00846514 Wow.exe      <unknown symbol>+0 (0x00846495,0x08D2D6E0,0x00000000,0x12F60000)

--- Thread ID: 3020 ---
719D5FA7 mswsock.dll  <unknown symbol>+0 (0x00000001,0x0B35FE84,0x0B35FC7C,0x0B35FD80)
71A3314F WS2_32.dll   select+167 (0x00000001,0x0B35FE84,0x0B35FC7C,0x0B35FD80)
3F9DE9A9 WININET.dll  Ordinal346+1710 (0x0B35FFEC,0x7C80B729,0x003A8EE0,0x0019F260)
3F9FDEAB WININET.dll  InternetSetStatusCallbackA+483 (0x003A8EE0,0x0019F260,0x00000040,0x003A8EE0)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x3F9FDE9E,0x003A8EE0,0x00000000,0x15B70000)

--- Thread ID: 5480 ---
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x7C937EDB,0x00000000,0x00000000,0x0C070000)

--- Thread ID: 5832 ---
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x719DD2C6,0x0BFB7B38,0x00000000,0x00000008)

--- Thread ID: 5304 ---
79EC45F9 mscorwks.dll CreateAssemblyNameObject+144878 (0x00000000,0x122AFFEC,0x7C80B729,0x055EF3E4)
79EC44A7 mscorwks.dll CreateAssemblyNameObject+144540 (0x055EF3E4,0x00000000,0x00000000,0x055EF3E4)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x79EC444F,0x055EF3E4,0x00000000,0x0AF20000)

--- Thread ID: 5104 ---
79E8C5F9 mscorwks.dll LogHelp_TerminateOnAssert+97 (0x000001E4,0x00009C40,0x00000000,0x353F8890)
79E8C52F mscorwks.dll DllUnregisterServerInternal+66835 (0x00009C40,0x00000000,0x00000000,0x1C68FCB0)
79E8C54E mscorwks.dll DllUnregisterServerInternal+66866 (0x00009C40,0x00000000,0x00000000,0x1C68FCA4)
79EC43BB mscorwks.dll CreateAssemblyNameObject+144304 (0x00323680,0x00009C40,0x00000000,0x353F8998)
79EC4849 mscorwks.dll CreateAssemblyNameObject+145470 (0x00000000,0x7C91D06A,0x7C91E45F,0x1C68FD30)
79F75715 mscorwks.dll CorExitProcess+139071 (0x0C497A68,0x74520000,0x6365446C,0x0C497A68)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x79F756CF,0x0C497A68,0x00000000,0x1C870000)


----------------------------------------
    Loaded Modules
----------------------------------------

0x00400000 - 0x017AA000  C:\Games\World of Warcraft\Wow.exe
0x01870000 - 0x01879000  C:\WINDOWS\system32\Normaliz.dll
0x02BA0000 - 0x02BBB000  C:\lavori\cvs\babbot\BabBot\BabBot\bin\Debug\EasyHook32.dll
0x031F0000 - 0x03200000  C:\WINDOWS\assembly\GAC_MSIL\EasyHook\2.5.0.0__4b580fca19d0b0c5\EasyHook.dll
0x032D0000 - 0x032DC000  C:\WINDOWS\assembly\GAC_MSIL\Dante\1.0.3603.30982__85381029ecd6945b\Dante.dll
0x07C20000 - 0x07C35000  C:\WINDOWS\system32\PGPlsp.dll
0x0BCA0000 - 0x0BCEE000  C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
0x10000000 - 0x10069000  C:\Games\World of Warcraft\DivxDecoder.dll
0x12410000 - 0x12F53000  C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\5cea03cfb008f2eac1439a9905467f37\System.Web.ni.dll
0x16080000 - 0x160A5000  C:\Programmi\Bonjour\mdnsNSP.dll
0x1D120000 - 0x1D235000  C:\Games\World of Warcraft\dbghelp.dll
0x3C910000 - 0x3C984000  C:\Games\World of Warcraft\Battle.net.dll
0x3F9D0000 - 0x3FAB6000  C:\WINDOWS\system32\WININET.dll
0x40070000 - 0x40258000  C:\WINDOWS\system32\iertutil.dll
0x45010000 - 0x45142000  C:\WINDOWS\system32\urlmon.dll
0x4FD60000 - 0x4FF06000  C:\WINDOWS\system32\d3d9.dll
0x5B4B0000 - 0x5B4B7000  C:\WINDOWS\system32\umdmxfrm.dll
0x5BC70000 - 0x5BCC5000  C:\WINDOWS\system32\NETAPI32.dll
0x5C8A0000 - 0x5C8C1000  C:\WINDOWS\system32\GLU32.dll
0x5D190000 - 0x5D197000  C:\WINDOWS\system32\serwvdrv.dll
0x5D4D0000 - 0x5D56A000  C:\WINDOWS\system32\comctl32.dll
0x5F140000 - 0x5F20C000  C:\WINDOWS\system32\OPENGL32.dll
0x66750000 - 0x667A8000  C:\WINDOWS\system32\hnetcfg.dll
0x67770000 - 0x67831000  C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\af21e3011fb4e107b13ea5c40c351ec4\System.Runtime.Remoting.ni.dll
0x68000000 - 0x68036000  C:\WINDOWS\system32\rsaenh.dll
0x68DD0000 - 0x68DD9000  C:\WINDOWS\system32\HID.DLL
0x6D330000 - 0x6D36A000  C:\WINDOWS\system32\DINPUT8.dll
0x6DEB0000 - 0x6DEB6000  C:\WINDOWS\system32\d3d8thk.dll
0x719D0000 - 0x71A10000  C:\WINDOWS\system32\mswsock.dll
0x71A10000 - 0x71A18000  C:\WINDOWS\System32\wshtcpip.dll
0x71A20000 - 0x71A28000  C:\WINDOWS\system32\WS2HELP.dll
0x71A30000 - 0x71A47000  C:\WINDOWS\system32\WS2_32.dll
0x71B80000 - 0x71B93000  C:\WINDOWS\system32\SAMLIB.dll
0x736D0000 - 0x7371B000  C:\WINDOWS\system32\DDRAW.dll
0x73B30000 - 0x73B36000  C:\WINDOWS\system32\DCIMAN32.dll
0x752E0000 - 0x7530E000  C:\WINDOWS\system32\msctfime.ime
0x76340000 - 0x7635D000  C:\WINDOWS\system32\IMM32.dll
0x76980000 - 0x76A35000  C:\WINDOWS\system32\USERENV.dll
0x76B00000 - 0x76B2E000  C:\WINDOWS\system32\WINMM.dll
0x76BB0000 - 0x76BBB000  C:\WINDOWS\system32\PSAPI.DLL
0x76D20000 - 0x76D39000  C:\WINDOWS\system32\Iphlpapi.dll
0x76E40000 - 0x76E4E000  C:\WINDOWS\system32\rtutils.dll
0x76E50000 - 0x76E62000  C:\WINDOWS\system32\rasman.dll
0x76E70000 - 0x76E9F000  C:\WINDOWS\system32\TAPI32.dll
0x76EA0000 - 0x76EDC000  C:\WINDOWS\system32\RASAPI32.dll
0x76EE0000 - 0x76F07000  C:\WINDOWS\system32\DNSAPI.dll
0x76F20000 - 0x76F4D000  C:\WINDOWS\system32\WLDAP32.dll
0x76F70000 - 0x76F78000  C:\WINDOWS\System32\winrnr.dll
0x76F80000 - 0x76F86000  C:\WINDOWS\system32\rasadhlp.dll
0x770F0000 - 0x7717B000  C:\WINDOWS\system32\OLEAUT32.dll
0x773A0000 - 0x774A3000  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
0x774B0000 - 0x775ED000  C:\WINDOWS\system32\ole32.dll
0x77660000 - 0x77681000  C:\WINDOWS\system32\NTMARTA.DLL
0x778F0000 - 0x779E7000  C:\WINDOWS\system32\SETUPAPI.dll
0x77BB0000 - 0x77BC5000  C:\WINDOWS\system32\MSACM32.dll
0x77BD0000 - 0x77BD8000  C:\WINDOWS\system32\VERSION.dll
0x77BE0000 - 0x77C38000  C:\WINDOWS\system32\msvcrt.dll
0x77DA0000 - 0x77E32000  C:\WINDOWS\system32\RPCRT4.dll
0x77E40000 - 0x77E89000  C:\WINDOWS\system32\GDI32.dll
0x77E90000 - 0x77F06000  C:\WINDOWS\system32\SHLWAPI.dll
0x77F10000 - 0x77F21000  C:\WINDOWS\system32\Secur32.dll
0x77F40000 - 0x77FEB000  C:\WINDOWS\system32\ADVAPI32.dll
0x78130000 - 0x781CB000  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll
0x79000000 - 0x79046000  C:\WINDOWS\system32\mscoree.dll
0x79060000 - 0x790BB000  C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
0x790C0000 - 0x79BB7000  C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\7124a40b9998f7b63c86bd1a2125ce26\mscorlib.ni.dll
0x79E70000 - 0x7A400000  C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
0x7A440000 - 0x7ABC5000  C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\3de5bd01124463d7862bd173af90bc83\System.ni.dll
0x7C800000 - 0x7C901000  C:\WINDOWS\system32\kernel32.dll
0x7C910000 - 0x7C9C8000  C:\WINDOWS\system32\ntdll.dll
0x7C9D0000 - 0x7D1EE000  C:\WINDOWS\system32\SHELL32.dll
0x7E390000 - 0x7E421000  C:\WINDOWS\system32\USER32.dll


----------------------------------------
    Memory Dump
----------------------------------------

Code: 16 bytes starting at (EIP = 02C22B08)

02C22B08: 8B 41 0C 8B  49 04 FF D0  59 C6 41 08  00 F6 41 04  .A..I...Y.A...A.


Stack: 1024 bytes starting at (ESP = 0019FD40)

* = addr  **                                                  *               
0019FD40: 70 99 33 00  B0 FF 19 00  87 A4 00 7A  FF FF FF FF  p.3........z....
0019FD50: 90 FD 19 00  5C 22 62 00  80 CA 34 00  49 AB A3 00  ....\"b...4.I...
0019FD60: 38 47 1B 06  20 00 00 00  38 47 1B 06  88 FD 19 00  8G.. ...8G......
0019FD70: E6 3A 60 00  02 00 00 00  49 AB A3 00  00 00 00 00  .:`.....I.......
0019FD80: 00 00 00 00  00 00 80 3F  A4 FD 19 00  0C 3B 60 00  .......?.....;`.
0019FD90: A4 FD 19 00  1F 3B 60 00  00 00 00 00  00 00 00 00  .....;`.........
0019FDA0: 00 00 00 00  5C FE 19 00  5F E3 44 00  B0 78 91 05  ....\..._.D..x..
0019FDB0: 30 7A 91 05  00 00 80 3F  00 00 00 00  00 00 00 00  0z.....?........
0019FDC0: 00 00 00 00  00 00 00 00  00 00 80 3F  00 00 00 00  ...........?....
0019FDD0: 00 00 00 00  00 00 00 00  00 00 00 00  00 00 80 3F  ...............?
0019FDE0: 00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
0019FDF0: 00 00 80 3F  00 00 00 40  00 00 00 00  00 00 00 00  ...?...@........
0019FE00: 00 00 00 00  00 00 00 00  00 00 00 40  00 00 00 00  ...........@....
0019FE10: 00 00 00 00  00 00 00 00  00 00 00 00  6F 12 83 3B  ............o..;
0019FE20: 00 00 00 00  00 00 80 BF  00 00 80 BF  00 00 80 BF  ................
0019FE30: 00 00 80 3F  00 00 00 00  00 00 00 00  00 00 80 3F  ...?...........?
0019FE40: 00 00 80 3F  00 00 00 00  00 00 00 00  00 00 80 3F  ...?...........?
0019FE50: 00 00 00 00  00 00 80 3F  00 00 80 3F  8C FE 19 00  .......?...?....
0019FE60: 69 70 42 00  00 00 00 00  00 00 00 00  AA 22 C1 01  ipB.........."..
0019FE70: B0 78 91 05  68 7F 91 05  35 7A 91 05  DD 41 42 00  .x..h...5z...AB.
0019FE80: B0 78 91 05  06 00 00 00  01 00 00 00  B8 FE 19 00  .x..............
0019FE90: 59 42 42 00  B0 78 91 05  17 00 00 00  00 00 00 00  YBB..x..........
0019FEA0: D4 55 42 00  28 0A 00 00  00 00 00 00  01 00 00 00  .UB.(...........
0019FEB0: AA 22 C1 01  00 00 00 00  0C FF 19 00  EA 56 42 00  ."...........VB.
0019FEC0: 00 00 00 00  96 43 0B 3D  02 00 00 00  45 6E 67 69  .....C.=....Engi
0019FED0: 6E 65 20 31  34 35 34 00  00 00 00 00  00 00 2D 00  ne 1454.......-.
0019FEE0: D8 FC 19 00  2C 16 92 7C  B0 FF 19 00  28 0A 00 00  ....,..|....(...
0019FEF0: 28 2E 32 00  00 00 00 00  1A DC 91 7C  C7 A0 80 7C  (.2........|...|
0019FF00: A4 22 00 00  00 00 00 00  24 FF 19 00  24 FF 19 00  ."......$...$...
0019FF10: 31 57 42 00  00 00 00 00  22 6D 40 00  01 00 00 00  1WB....."m@.....
0019FF20: 01 00 00 00  C0 FF 19 00  9D 6D 40 00  D9 B2 40 00  .........m@...@.
0019FF30: 00 00 40 00  00 00 00 00  35 23 2D 00  0A 00 00 00  [email protected]#-.....
0019FF40: 6D CE F9 26  A8 EC 30 10  AC F1 C2 03  00 70 FD 7F  m..&..0......p..
0019FF50: 44 00 00 00  48 32 2D 00  A8 32 2D 00  C0 32 2D 00  D...H2-..2-..2-.
0019FF60: 00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
0019FF70: 00 00 00 00  32 00 00 00  00 00 00 00  08 00 00 00  ....2...........
0019FF80: 00 00 00 00  00 00 00 00  FF FF FF FF  FF FF FF FF  ................
0019FF90: FF FF FF FF  05 00 00 C0  01 00 00 00  05 00 00 00  ................
0019FFA0: 00 00 00 00  A8 EC 30 10  40 FF 19 00  68 F9 19 00  [email protected]...
0019FFB0: E0 FF 19 00  B0 DB 40 00  55 22 43 26  01 00 00 00  [email protected]"C&....
0019FFC0: F0 FF 19 00  77 70 81 7C  A8 EC 30 10  AC F1 C2 03  ....wp.|..0.....
0019FFD0: 00 70 FD 7F  05 00 00 C0  C8 FF 19 00  64 F9 19 00  .p..........d...
0019FFE0: FF FF FF FF  D8 9A 83 7C  80 70 81 7C  00 00 00 00  .......|.p.|....
0019FFF0: 00 00 00 00  00 00 00 00  00 10 40 00  00 00 00 00  ..........@.....
001A0000: 41 63 74 78  20 00 00 00  01 00 00 00  9C 24 00 00  Actx ........$..
001A0010: C4 00 00 00  00 00 00 00  20 00 00 00  00 00 00 00  ........ .......
001A0020: 14 00 00 00  01 00 00 00  06 00 00 00  34 00 00 00  ............4...
001A0030: 14 01 00 00  01 00 00 00  00 00 00 00  00 00 00 00  ................
001A0040: 00 00 00 00  00 00 00 00  00 00 00 00  02 00 00 00  ................
001A0050: 00 00 00 00  00 00 00 00  00 00 00 00  14 02 00 00  ................
001A0060: 9C 01 00 00  00 00 00 00  5B 49 59 2D  B0 03 00 00  ........[IY-....
001A0070: 32 00 00 00  E4 03 00 00  D8 02 00 00  00 00 00 00  2...............
001A0080: E4 02 02 83  BC 06 00 00  46 00 00 00  04 07 00 00  ........F.......
001A0090: EA 02 00 00  00 00 00 00  D2 D5 8C D1  F0 09 00 00  ................
001A00A0: 46 00 00 00  38 0A 00 00  EA 02 00 00  00 00 00 00  F...8...........
001A00B0: 2E AD 6A D8  24 0D 00 00  46 00 00 00  6C 0D 00 00  ..j.$...F...l...
001A00C0: 04 03 00 00  10 00 00 00  04 00 00 00  D4 00 00 00  ................
001A00D0: 02 00 00 00  01 00 00 00  14 01 00 00  90 0F 00 00  ................
001A00E0: 01 00 00 00  02 00 00 00  A4 10 00 00  2C 03 00 00  ............,...
001A00F0: 01 00 00 00  04 00 00 00  D0 13 00 00  50 10 00 00  ............P...
001A0100: 02 00 00 00  06 00 00 00  20 24 00 00  7C 00 00 00  ........ $..|...
001A0110: 02 00 00 00  53 73 48 64  2C 00 00 00  01 00 00 00  ....SsHd,.......
001A0120: 01 00 00 00  01 00 00 00  05 00 00 00  88 00 00 00  ................
001A0130: 01 00 00 00  5C 0F 00 00  2C 00 00 00  5A 00 00 00  ....\...,...Z...


------------------------------------------------------------------------------

[kynox]

That's a preprocessor definition not a calling convention you ****tard.

Trolled!

lulz

[Cypher]

Trolled!

lulz

Your mother is a troll IRL. That's why she has to wear a bag on her head when in public.