Anyway, here's what's at 48b900
0048B900 C785 58FFFFFF>MOV DWORD PTR [EBP-A8],80
0048B90A 8B4D 08 MOV ECX,[EBP+8]
0048B90D 8B41 2C MOV EAX,[ECX+2C]
0048B910 83F8 01 CMP EAX,1
0048B913 0F84 01000000 JE KingBee3.0048B91A
0048B919 C3 RETN
0048B91A 6A 00 PUSH 0
0048B91C FF71 14 PUSH DWORD PTR [ECX+14]
0048B91F FF71 10 PUSH DWORD PTR [ECX+10]
0048B922 6A 11 PUSH 11
0048B924 E8 5786F7FF CALL KingBee3.00403F80
0048B929 83C4 10 ADD ESP,10
0048B92C C3 RETN
As long as the call is in the bullet code like where I said it should be this oughta work.