Ok here is a crash I get, I hope this is all the info needed. 01D83BA8 push ebx 01D83BA9 push esi 01D83BAA mov esi,dword ptr [eax+30h] 01D83BAD mov ebx,ecx 01D83BAF mov eax,dword ptr [ebx+8] 01D83BB2 test eax,eax 01D83BB4 je 01D83EA6 01D83BBA mov ecx,dword ptr [eax+8] 01D83BBD test ecx,ecx 01D83BBF ...