TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
C:\WINDOWS\system32\kernel32.dll
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
C:\WINDOWS\system32\kernel32.dll
C:\WINDOWS\system32\kernel32.dll
C:\WINDOWS\system32\dsound.dll
C:\WINDOWS\system32\dsound.dll
C:\WINDOWS\system32\dsound.dll
C:\WINDOWS\system32\dsound.dll
C:\WINDOWS\system32\kernel32.dll
C:\WINDOWS\system32\kernel32.dll
C:\WINDOWS\system32\dsound.dll
C:\WINDOWS\system32\dsound.dll
C:\WINDOWS\system32\dsound.dll
C:\WINDOWS\system32\kernel32.dll
C:\WINDOWS\system32\kernel32.dll
E:\2c4rryG4m32\World of Warcraft
E:\2c4rryG4m32\World of Warcraft
E:\2c4rryG4m32\World of Warcraft
E:\2c4rryG4m32\World of Warcraft
C:\WINDOWS\system32\kernel32.dll
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
TBC\Wow.exe
C:\WINDOWS\system32\USER32.dll
C:\WINDOWS\system32\USER32.dll
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\system32\WS2_32.dll
C:\WINDOWS\system32\WININET.dll
C:\WINDOWS\system32\WININET.dll
C:\WINDOWS\system32\kernel32.dll
C:\WINDOWS\system32\USER32.dll
C:\WINDOWS\system32\USER32.dll
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
C:\WINDOWS\system32\USER32.dll
C:\WINDOWS\system32\USER32.dll
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
C:\WINDOWS\system32\kernel32.dll
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
C:\WINDOWS\system32\kernel32.dll
C:\WINDOWS\system32\USER32.dll
C:\WINDOWS\system32\USER32.dll
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
(0x00000064,0x7C91538B,0x020127B8,0x02014DF0)
symbol>+0 (0x0012E9C8,0x7C80B729,0x020127B8,0x7C9
symbol>+0 (0x00650068,0x0065006D,0x005C0073,0x007
symbol>+0 (0x00000000,0x00000000,0x00000000,0x000
0075FDD4 Wow.exe
00008)
3CE88)
00645617 Wow.exe
<unknown symbol>+0 (0x00002674,0x00000010,0x00000000,0x0AD
3CE88)
7C80B729 kernel32.dll GetModuleFileNameA+442 (0x006455E0,0x0AD3CE88,0x00000000,0
x00006000)
--- Thread ID: 3972 --7E4195F9 USER32.dll GetLastInputInfo+261 (0x00000002,0x0980FF60,0xFFFFFFFF,0x0
0000000)
7E4196A8 USER32.dll MsgWaitForMultipleObjects+31 (0x00000002,0x0980FF60,0x0000
0000,0xFFFFFFFF)
006771C8 Wow.exe
<unknown symbol>+0 (0x390357B7,0x7C80B729,0x019620F8,0xB93
04E77)
0075FDD4 Wow.exe
<unknown symbol>+0 (0x0075FD55,0x019620F8,0x00000000,0x000
000C8)
---------------------------------------Loaded Modules
---------------------------------------0x00340000
0x00400000
0x02330000
0x0A440000
0x10000000
0x3D930000
0x3DFD0000
0x4FDD0000
0x5AD70000
0x5B860000
0x5D090000
0x5ED00000
0x662B0000
0x68000000
0x68B20000
0x6D990000
0x71A50000
0x71A90000
0x71AA0000
0x71AB0000
0x71BF0000
0x722B0000
0x72D10000
0x72D20000
0x73760000
0x73BC0000
0x73EE0000
0x73F10000
0x74720000
0x755C0000
0x76390000
0x76790000
0x769C0000
0x76B40000
0x76C30000
0x76C90000
0x76D60000
0x76E80000
0x76E90000
0x00349000
0x00EC8000
0x02335000
0x0A555000
0x10069000
0x3DA17000
0x3E1BC000
0x4FF76000
0x5ADA8000
0x5B8B5000
0x5D12A000
0x5EDCC000
0x66308000
0x68036000
0x68B40000
0x6D996000
0x71A8F000
0x71A98000
0x71AA8000
0x71AC7000
0x71C03000
0x722B5000
0x72D18000
0x72D29000
0x737AB000
0x73BC6000
0x73EE4000
0x73F6C000
0x7476C000
0x755EE000
0x763AD000
0x7679C000
0x76A74000
0x76B6D000
0x76C5E000
0x76CB8000
0x76D79000
0x76E8E000
0x76EA2000
C:\WINDOWS\system32\Normaliz.dll
E:\2c4rryG4m32\World of Warcraft TBC\Wow.exe
C:\Program Files\Unlocker\UnlockerHook.dll
E:\2c4rryG4m32\World of Warcraft TBC\dbghelp.dll
E:\2c4rryG4m32\World of Warcraft TBC\DivxDecoder.dll
C:\WINDOWS\system32\WININET.dll
C:\WINDOWS\system32\iertutil.dll
C:\WINDOWS\system32\d3d9.dll
C:\WINDOWS\system32\uxtheme.dll
C:\WINDOWS\system32\NETAPI32.dll
C:\WINDOWS\system32\comctl32.dll
C:\WINDOWS\system32\OPENGL32.dll
C:\WINDOWS\system32\hnetcfg.dll
C:\WINDOWS\system32\rsaenh.dll
C:\WINDOWS\system32\GLU32.dll
C:\WINDOWS\system32\d3d8thk.dll
C:\WINDOWS\system32\mswsock.dll
C:\WINDOWS\System32\wshtcpip.dll
C:\WINDOWS\system32\WS2HELP.dll
C:\WINDOWS\system32\WS2_32.dll
C:\WINDOWS\system32\SAMLIB.dll
C:\WINDOWS\system32\sensapi.dll
C:\WINDOWS\system32\msacm32.drv
C:\WINDOWS\system32\wdmaud.drv
C:\WINDOWS\system32\DDRAW.dll
C:\WINDOWS\system32\DCIMAN32.dll
C:\WINDOWS\system32\KsUser.dll
C:\WINDOWS\system32\dsound.dll
C:\WINDOWS\system32\MSCTF.dll
C:\WINDOWS\system32\msctfime.ime
C:\WINDOWS\system32\IMM32.dll
C:\WINDOWS\system32\cryptdll.dll
C:\WINDOWS\system32\USERENV.dll
C:\WINDOWS\system32\WINMM.dll
C:\WINDOWS\system32\WINTRUST.dll
C:\WINDOWS\system32\IMAGEHLP.dll
C:\WINDOWS\system32\iphlpapi.dll
C:\WINDOWS\system32\rtutils.dll
C:\WINDOWS\system32\rasman.dll
**
08
A9
E4
F7
08
52
FC
84
08
F8
08
80
00
D8
00
4D
08
08
00
82
21
A7
00
BC
CA
FD
00
DB
80
36
00
FD
00
00
80
80
F0
42
8B
00
F0
5E
5E
12
F0
1F
06
15
00
12
00
00
06
06
1C
00
00
00
1C
00
00
00
1C
1B
07
00
00
00
00
00
07
07
00
18
01
50
B0
08
19
00
84
08
10
A0
E1
6C
08
36
10
4D
00
10
00
09
B2
00
00
00
FD
00
FE
FD
5C
53
80
48
FE
00
00
83
00
51
1D
F0
00
00
12
F0
12
12
40
5B
06
58
12
00
00
02
00
00
00
1C
00
00
00
1C
00
00
00
00
07
00
00
00
B0
F7
1C
E4
FE
B0
08
54
E5
A9
B0
7F
05
01
07
10
FC
36
B2
A7
FD
21
FF
B2
00
FD
A5
C2
B2
D0
00
00
C4
FE
FD
48
1D
00
12
8B
FF
1D
F0
12
46
46
1D
46
00
00
41
12
12
58
00
00
00
00
FF
00
1C
00
00
00
00
00
00
00
00
00
00
00
F8
50
1D
5E
48
00
01
EB
00
80
F4
08
A0
01
68
4D
83
10
FC
09
0B
8A
FD
00
00
E9
00
36
83
80
35
00
CC
00
F4
FE
12
51
51
4A
12
00
00
5E
00
15
42
06
5D
00
41
00
55
12
00
00
00
00
00
00
00
00
00
00
00
07
00
00
00
00
00
00
*
................
..B.........P.Q.
.!............Q.
....P.Q..!..^.J.
............H...
R.^.............
..^.............
........T.....^.
..........F.....
..........F..6..
..............B.
.6........F.....
.....\@......5].
....lS[.........
..........A.h.A.
M...6HX.....M...
..............U.
....M...6HX.....
0012FDF0:
0012FE00:
0012FE10:
0012FE20:
0012FE30:
0012FE40:
0012FE50:
0012FE60:
0012FE70:
0012FE80:
0012FE90:
0012FEA0:
0012FEB0:
0012FEC0:
0012FED0:
0012FEE0:
0012FEF0:
0012FF00:
0012FF10:
0012FF20:
0012FF30:
0012FF40:
0012FF50:
0012FF60:
0012FF70:
0012FF80:
0012FF90:
0012FFA0:
0012FFB0:
0012FFC0:
0012FFD0:
0012FFE0:
0012FFF0:
00130000:
00130010:
00130020:
00130030:
00130040:
00130050:
00130060:
00130070:
00130080:
00130090:
001300A0:
001300B0:
001300C0:
48
F5
8C
02
36
19
94
00
00
E8
01
06
02
00
64
D8
D8
D8
61
01
00
AC
44
00
00
01
00
00
E0
F0
00
FF
00
41
C4
14
14
00
00
9C
32
E4
EA
46
2E
04
70
F9
BA
00
48
0A
FE
00
00
52
00
00
00
00
34
FC
63
20
9D
00
00
F5
00
00
00
00
00
00
FF
FF
80
FF
00
63
00
00
01
00
00
01
00
02
02
00
AD
03
06
55
88
00
58
91
12
00
00
37
00
00
00
00
00
12
16
00
42
00
40
B4
00
00
00
00
00
00
12
12
FD
FF
00
74
00
00
00
00
00
00
00
02
00
00
6A
00
07
00
00
00
00
00
00
00
00
06
00
00
00
00
00
00
00
00
00
00
00
1F
00
00
00
00
00
00
00
00
7F
FF
00
78
00
00
00
00
00
00
00
83
00
00
D8
00
08
36
28
02
28
A8
73
00
08
00
0C
00
01
00
18
F0
01
00
01
C0
00
35
38
00
00
00
05
35
20
6F
05
B0
00
20
00
01
01
00
00
00
E4
BC
00
38
24
10
80
48
A5
00
A5
C1
C8
00
10
00
FF
00
00
00
00
FE
00
00
00
FF
00
00
45
00
00
00
00
00
A7
77
00
9A
00
00
00
00
00
00
00
00
03
06
00
0A
0D
00
06
58
AD
00
AD
BD
41
00
83
00
12
00
00
00
00
12
00
00
00
12
00
39
15
00
00
00
00
39
40
81
00
83
00
00
00
00
00
00
00
00
00
00
00
00
00
00
07
00
07
00
07
0A
00
00
02
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
C0
00
00
7C
C0
7C
00
00
00
00
00
00
00
00
00
00
00
00
00
00
C8
4D
00
50
02
4C
08
2B
00
02
3C
6A
00
45
2C
B0
1A
60
58
98
3F
35
C8
00
00
00
01
40
4C
35
C8
78
00
01
20
06
00
00
00
5B
D8
46
D2
EA
46
04
9D
00
00
FE
00
70
10
B4
00
01
88
9C
00
6E
16
FF
DC
F5
68
68
23
00
47
00
00
00
00
FF
82
00
FF
77
10
00
00
00
00
00
00
49
02
00
D5
02
00
00
75
12
00
12
00
06
83
42
00
00
42
42
00
67
00
12
90
B4
40
40
15
37
15
00
00
00
00
12
36
39
12
81
40
00
00
00
00
00
00
59
00
00
8C
00
00
00
10
00
00
00
00
07
02
00
00
00
00
00
00
69
7C
00
7C
1F
00
00
00
00
00
00
00
00
00
00
1F
00
00
7C
00
00
00
00
00
00
00
2D
00
00
D1
00
00
00
28
08
FF
41
AC
E0
A9
00
A8
04
08
28
58
6E
00
28
C7
24
01
E9
01
00
E0
00
01
01
05
F8
01
35
F4
00
00
9C
00
34
00
02
14
B0
00
04
F0
00
6C
D4
FE
80
FF
FF
10
5F
1B
00
C1
00
10
0A
48
65
00
0A
A0
FF
00
A4
00
80
47
00
0C
00
00
F8
00
00
F8
00
00
24
00
00
00
00
02
03
00
07
09
00
0D
00
12
06
FF
55
83
40
40
00
BD
00
83
00
58
20
15
00
80
12
00
40
00
FD
15
00
00
01
00
12
00
37
12
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
07
FF
00
02
00
00
00
0A
00
02
00
00
65
00
00
7C
00
00
00
00
7F
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
00
Hp........u.(...
..U.6HX.M.......
....(...........
........P...A.U.
6HX.(...........
........Lp..._@.
....s.A.......@.
........+.B.....
................
.R7.............
........<.B.....
........j.B.(...
............XHX.
........Engine e
d4......,..|....
............(...
.c.........|...|
. ......`...$...
a.B.....Xh@.....
.........h@...@.
..@.....?#......
....5.9.5.7.....
D...8E...G...G..
................
................
................
................
....5.9.@.......
.... .@.L.6.....
....ow.|5.9.5.7.
................
.......|xw.|....
..........@.....
Actx ........$..
........ .......
............4...
................
................
................
........[IY-....
2...............
........F.......
................
F...8...........
..j.$...F...l...
................
------------------------------------------------------------------------------