[Enable] Alloc(SPControl,128) Label(Return) Label(First) Label(Second) Label(Start) SPControl: cmp [esp],011DB70A //51 8B ? 89 ? 24 ? 50 8D ? ? E8 ? ? ? ? 8B ? ? ? ? ? E8 jne Return push eax mov eax, dword ptr [019B8908] mov eax, dword ptr [eax+1378] cmp eax, #706030000 je Start cmp eax, #691000100 je First cmp eax, #691000101 je Second pop eax jmp Return Start: pop eax mov [esp+8],#621 //X Coord mov [esp+C],#120 //Y Coord jmp Return First: pop eax mov [esp+8],#264 //X Coord mov [esp+C],#-2410 //Y Coord jmp Return Second: pop eax mov [esp+8],#-216 //X Coord mov [esp+C],#-3868 //Y Coord //jmp Return Return: //6A FF 68 ? ? ? ? 64 A1 ? ? ? ? 50 81 ? ? ? ? ? 53 55 56 57 A1 ? ? ? ? 33 ? 50 8D ? 24 ? ? ? ? 64 ? ? ? ? ? 8B ? 8B ? 24 ? ? ? ? 8B ? 24 ? ? ? ? 8B jmp 012D21F0 017EB9BC: //4byte Scan ^ [5th Result] dd SPControl [Disable] 017EB9BC: //Same as above dd 012D21F0 //Address in Return DeAlloc(SPControl)