Does this crash not happen if you use the mLoad function to keep the DLL loaded? Sounds like $dllcall is unloading the DLL as soon as it returns, yet the thread is still running (in unloaded memory).

NaquadaBomb
www.mirc-dll.com