From PROPER nfo: Other: 0060FA18: CALL fifa07.0040A809 0060FA71: CALL fifa07.0040A809 Reloaded: 0060FA18: CALL fifa07.0081E525 0060FA71: JMP fifa07.0060FCF0 ------------------------------------------- From VITALITY's .exe: 0060FA18 . E8 ECADDFFF CALL fifa07vt.0040A809 0060FA71 . E8 93ADDFFF CALL fifa07vt.0040A809 From RELOADED's .exe: 0060FA18 . E8 08EB2000 CALL fifa07rl.0081E525 0060FA71 . E9 7A020000 JMP fifa07rl.0060FCF0 ------------------------------------------ Follow VITALITY's second jump: 0040A809 /$ 51 PUSH ECX 0040A80A |. 50 PUSH EAX 0040A80B |. E8 D371FFFF CALL fifa07vt.004019E3 0040A810 |$ 8B04B5 D4AC8A0>MOV EAX,DWORD PTR DS:[ESI*4+8AACD4] BAM! You got SERVED with Safedisc 4 API routine! Follow RELOADED's second jump: 0060FCF0 > 894C24 08 MOV DWORD PTR SS:[ESP+8],ECX 0060FCF4 > D905 94F7A800 FLD DWORD PTR DS:[A8F794] 0060FCFA . D805 B88D8400 FADD DWORD PTR DS:[848DB8] 0060FD00 . D95424 1C FST DWORD PTR SS:[ESP+1C] 0060FD04 . D9E0 FCHS 0060FD06 . D90424 FLD DWORD PTR SS:[ESP] 0060FD09 . D8D9 FCOMP ST(1) 0060FD0B . DFE0 FSTSW AX 0060FD0D . F6C4 05 TEST AH,5 0060FD10 . 7A 05 JPE SHORT fifa07rl.0060FD17 BAM! Working function. Oh by the way: Referee won't find his restart position in ViTALiTY's crack. It will hit the safedisc API, fail a check, and exit. -Zab